agent1c.exe
Windows Exe (x86-32)
Created at 2019-06-16T17:55:00
Monitored Processes
Behavior Information - Sequential View
Process #1: agent1c.exe
28712
0
| Information | Value |
|---|---|
| ID | #1 |
| File Name | c:\users\5p5nrgjn0js halpmcxz\desktop\agent1c.exe |
| Command Line | "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\agent1c.exe" |
| Initial Working Directory | C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ |
| Monitor | Start Time: 00:00:24, Reason: Analysis Target |
| Unmonitor | End Time: 00:01:01, Reason: Self Terminated |
| Monitor Duration | 00:00:36 |
OS Process Information
| Information | Value |
|---|---|
| PID | 0xa70 |
| Parent PID | 0x45c (c:\windows\explorer.exe) |
| Bitness | 32-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | XDUWTFONO\5p5NrGJn0jS HALPmcxz |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
A74
0x
A80
0x
A8C
0x
A90
0x
A94
0x
A98
0x
A9C
0x
AA0
0x
AAC
0x
AB0
0x
AB4
0x
AC8
0x
ACC
0x
AD0
0x
AD4
0x
AD8
0x
ADC
0x
B04
0x
B10
|
Memory Dumps
| Name | Start VA | End VA | Dump Reason | PE Rebuilds | Bitness | Entry Points | AV | YARA | Actions |
|---|---|---|---|---|---|---|---|---|---|
| agent1c.exe | 0x00400000 | 0x00418FFF | Relevant Image | - | 32-bit | - |
|
|
|
Dropped Files
| Filename | File Size | Hash Values | YARA Match | Actions |
|---|---|---|---|---|
| C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\agent1c.exe | 92.50 KB |
MD5:
64f1db1b81341d17c44f73325d19deec
SHA1: c8765bc1504b2ccd3458d45f5e36bbff59434baf SHA256: 90fd4ed695ecf88b10188d6111fe7f7f5b9550e19f453b85052c2ade1d3b2171 SSDeep: 1536:mBwl+KXpsqN5vlwWYyhY9S4AXoFaOV0Xt2lj730j/enn9tvfXpVcCu9d:Qw+asqN5aW/hLOYOVY2lj73QGvfXHxu |
|
|
| C:\Boot\BOOTSTAT.DAT.id-9C354B42.[my0day@aol.com].0day | 64.25 KB |
MD5:
5b19a19f08c3f17326cb99b39f1aab09
SHA1: 97b9c7890c30966792ded599147f1d7e083d5651 SHA256: fd2e3e99fad3361ca8a30425a81601816d41fa1f57901a714b4c1bf775c45f78 SSDeep: 1536:tIcPtR/B0Kmnmj4wupQ/KdJC8hpXhc4JNQVyJl2Lu9:tr0KomOpdJC8b6QyV+Ku |
|
|
| C:\BOOTSECT.BAK.id-9C354B42.[my0day@aol.com].0day | 8.25 KB |
MD5:
c84a3a1aa740f11fb0ef2f582e8c7b26
SHA1: 26105bd1d0c90afb003db9ca4b9ae113ff197c9c SHA256: 1b1cece3f1bb4001a1ebb355d1004163109335ee7a0cd3c6a9ba7053efd25574 SSDeep: 192:zGB7Z4neayrXZZBEZng0nb107M8+qndNQ8bE:zGAyDqa8e6qQME |
|
|
| C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id-9C354B42.[my0day@aol.com].0day | 1.76 KB |
MD5:
11162ebc80a7b958b318dc1ecce2bdd4
SHA1: 527fb33e976d41b12edd254e604e99d3ae60a5e1 SHA256: f79ad74ab08b64a877a3bf45d9737a58066674df3a05a37fa43c91f81a7c6ed2 SSDeep: 48:35YIdSN8xotxnolKGZ+sDEyplrD5PYgWhaGei7JAm:vdSN8plKGZrdRffm |
|
|
| C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day | 2.47 KB |
MD5:
9269966e048c281c444fb9432ca480c6
SHA1: b2ecd2ceac3db90a35471329b9293f2d0c53495f SHA256: 82a8688f98c18e23bf60262f53425fa8bd0c43bba85cd5f3a5fad7c2ab2b3c7e SSDeep: 48:jk7u0lIGK7Gel8hYLsZZq8AXg3+1Pw+gNSymzLxGX/C+ZKPjV1kBzSEbftpJAU:AK0CGepXLWqRguJw+g0Laq1LVE7eU |
|
|
| C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id-9C354B42.[my0day@aol.com].0day | 1.66 KB |
MD5:
eddba153a6f5ed55a6cf8fb89ac862c8
SHA1: 863d0465890b036f489d2a3e82aaaf5355f6bb4e SHA256: 8923561f258fd7bc173082cb3c43a99805d896e83bdcc86ed8ee5b9a7d85afc6 SSDeep: 48:8ZU8bZeYUik/QIxVNlBG+E6VETfbLUWnp00p2+QznaztekJAE:8ZU8F0xK+E6yTsz0pqE |
|
|
| C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day | 2.07 KB |
MD5:
e50c76de7d408dd85a4dfa8bea7460bc
SHA1: 411a2aed66e4f8864c4cadac0e12046853bff3a3 SHA256: d33dd6f456367db0dec1e72454bfe6cb982822e3f68c8cd157be41fd5aacef61 SSDeep: 48:eX3xxX81LgGwqnBYwGNCMtFAr0hwZLAvQuGtbwffAi1AlI8CJAU:eX3xZ81LJwqnL2uqwZRuwwff1ylXLU |
|
|
| C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id-9C354B42.[my0day@aol.com].0day | 1.66 KB |
MD5:
8e6a25316631433220b272f082ed1418
SHA1: 1f7e881f637f6b362f854e995c49b1c26f7798e2 SHA256: bb74afa08d110fe5b7e81ca6e1b5ed4f91dc53153ccf2e20da1d4ff070286127 SSDeep: 48:PHpVDosJUC+jjLuX6WGAT8UaM3AQvCeGJAu:PJeGXnGcRakAmu |
|
|
| C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id-9C354B42.[my0day@aol.com].0day | 3.36 KB |
MD5:
4b3bf475234ca41cb061b1c01797f9ff
SHA1: 620299bf860a98b6eee1875d44a79f76f4cf4fbb SHA256: 38b5567328336f8a95720d25a01a01fe4891ca7d79555eb2effc135aa4ac377e SSDeep: 96:+OuJLpXFWCPL4BaOM/BIsy1N7ulGGp9xgD/iU/iSsS:wdpX14YQN7uljpoGw |
|
|
| C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day | 4.33 KB |
MD5:
abfe4a1d8c6915c6bd3cb56441ea6b30
SHA1: 10783ceb178fe6d0eb5d4c976e702bc06f6da35f SHA256: 29b1288b1bc4f2855c85cd633b225fb8862224836935780b4a352147dec808a0 SSDeep: 96:9JYvcRDQDfWNPvzChVM6mYspIL8v/Vg5XOPCHjJQruWU:9yvT+CPtqVwOPMjJZV |
|
|
| C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day | 2.60 KB |
MD5:
350013acfea2df3a3d8004739660d393
SHA1: f7f0dab2a4d2090907d9fc003f07f9e7910f72b7 SHA256: 29ea99e00202b7a524e016f321008e3942b852942b0f2ee698b2aacda3fa3339 SSDeep: 48:UA3MNGRqrMcMjMnf3rBKRL8lblVEACHq4hQjc9F5wB4cIsVQcHYro8hJAU:UA3M8AAcGwfr2LIkACHIZWcRVQO8oU |
|
|
| C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day | 1.80 KB |
MD5:
ec3776e73848ba073a41c2905875f8ce
SHA1: 88afea0de0ec088df08acb481aa5b0a61c6e7d61 SHA256: 8ce95586362f8b08d8eb9312fe81983b027809daf5dcfe68652bf42cf54e13de SSDeep: 48:UIJgfiokIgeCPpm0ACECGNDo6Qt7r0RC2yN58E5CE2BJAU:pJ2QeCKPUt/Ys58qAIU |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id-9C354B42.[my0day@aol.com].0day | 1.55 KB |
MD5:
5d634b6b3894749391ffb5fe175703d3
SHA1: a120c61ba7b4da460ac7e42ba26dfc5b360927bc SHA256: 624c7647e9aead88e2e6ce1a0ffa04dbfc77e4edc0173f54d4c589afb8b0dde9 SSDeep: 24:WuwyPx9jWVYreiYvBWEBcf1VNLxdiXqFUR/CeSxwfjnHMJeP8+ApMUkxEmrZRJlR:sc5rtwcJHIqOCerf4UPFAW7zJAU |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id-9C354B42.[my0day@aol.com].0day | 1.66 KB |
MD5:
2e9499486267fae00aec36f7852a9810
SHA1: 857a7c6127f6acc5b85b372adc1e2e338986c25d SHA256: b0b3b061ac86513dcb0dc3fa831a151d579946aa5b59be1b2bbef289079e8ccd SSDeep: 48:E1+ZcMb3TjEfOWc+hRQguBHYlC2kEl2U+h9u6JAU:vZXLTt+CY4Ol2U+WzU |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id-9C354B42.[my0day@aol.com].0day | 1.66 KB |
MD5:
37d2694e713a25ce89d82e312be01710
SHA1: cbb68bc7aac067759390461a910f2aa562e5742c SHA256: 4ea393af34cd6af66115cd070e21461066fa854c8b02bc14cb6f706dc377b5b6 SSDeep: 48:i5yCLUAzIzjQJBzIre7pbilgALho2p8ubJAU:i4CLTzIzSoydilPLhoyqU |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day | 5.97 KB |
MD5:
838df668189d8e8804b68ba07974615c
SHA1: c60ca3f5c992b80a1ea0fde215094395b6f11785 SHA256: 3aa682febf1394710bd5a5effe46a89a5faabf035211796c25b010daeedb077f SSDeep: 96:eKk3Du/uHLYVGZNTaFFYhtRPgHSkwR37rnn5u6hKTQp1XcJlG4Ur6siYayTupLQo:eKk3omYcEG9R37r5tKTQpOlnyTumk |
|
|
| C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id-9C354B42.[my0day@aol.com].0day | 1.60 KB |
MD5:
fc2637091baa1b3fbb0e2e1d593d7369
SHA1: 5b1696dff8ebb7600d84eb28d2753ff385c2adbd SHA256: abf7d7e3b191aa2cf6c208156c91536fff59e40011b7fe679105cec6146c21fd SSDeep: 24:6hrWYCRLnmMPLMvmeBmS/aVWP/Yq56n0gsvo+5VOYqS98rJWJGlk2leSHCvJlc5Y:0WYImMTMvNw2/PDy0gCJ+YqbOi1eHJAY |
|
|
| C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day | 2.54 KB |
MD5:
6963ad920fdf9478b6f60a4141061964
SHA1: 108dd57d915a2c3a5efefeb780a10c1db2555b93 SHA256: 383bcad3e4eb9bf3d90441f6a3feae6bdc722fc608e7ae7d25ac3c0f1d15bc27 SSDeep: 48:Hial68LtM+B58ZUd8V+xnoMdPVk02ejfZRGtgKKQe9huAiV7yFPMRHdmbHGEIJAU:Z6b+B58ZUzxnoMdPVkmjRWgie9hux7am |
|
|
| C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id-9C354B42.[my0day@aol.com].0day | 1.99 KB |
MD5:
02fd9960c736eae15bd30151c5d5bfa6
SHA1: 2aa371579765fb598802cb1e646b0d37b7b4f2c4 SHA256: b19543c51a446462e952feca121ce362da08d884eda6f7555cf1f5315fed5afa SSDeep: 48:AeVpkpWrFlkCTBTnFvk4QUBDiAUZQCUPtY519AJPerQJAQ:AeT5KWnNk4QUBsZtUlY51zJQ |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id-9C354B42.[my0day@aol.com].0day | 1.03 KB |
MD5:
083956374442d368b9498714582ed1b3
SHA1: bc2dda14febb47dbf06689de46d878096f0ce53f SHA256: 54b7568e5db99a24ea4f3f8d86f048f58e238e48efdc6af3cf1188756dfa5fa3 SSDeep: 24:W9OhpDSGxSZomwjUfMESR3qDV1lvJlc5m:W8hpeGxSm3jGmMB1xJAm |
|
|
| C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.id-9C354B42.[my0day@aol.com].0day | 1.44 KB |
MD5:
eafef255b6760960e58ce66e6c3e9cec
SHA1: aaac3e61c51b0d59892f460eff887fef7d3c2c4b SHA256: a49abfe614927143c6b84b76172e939d0f97b0caccbff09cad8ceefe5dfce53a SSDeep: 24:j/x7N2KHN87wqnrWHikJDU8OUSLxsyG9nR5fL6nNCv69NLS2JceSd7xJlc5Y:jp5N87wqnqCkJ/OxL1GnR5z6VS2yeixR |
|
|
| C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id-9C354B42.[my0day@aol.com].0day | 1.81 KB |
MD5:
2d48267570e9577842997e93ea1025a4
SHA1: 02485c8dec259ec8eb07d64e405c62c5df4b1590 SHA256: 1c05418bf362d3ad9552ed62f7b7c6e229abdd8bb4d8d5209c0af05851bdeef6 SSDeep: 48:K3iXBDQ88DVEOBUWKfQZR2u6D7Di0aigMaiW6oeoJAS:KOBOx9BUvQUhJnS |
|
|
| C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day | 2.18 KB |
MD5:
f5499ee25bab2165db85ad8e0c434a82
SHA1: 1c9f8b3942c5c1a61d8c9e660bdfab98179953d2 SHA256: 376c450c770bef09b277b7534258de47fb402f33d98f219a5794c29c69d5f72a SSDeep: 48:KYsIGgnTupqJjqJR4JW6sm7kEgmGumxHwM2slPlq1zKSwqdG+838EJKJAU:BsI3T80jq3Wsm74mGmMll0PwqdGLMEJA |
|
|
| C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id-9C354B42.[my0day@aol.com].0day | 1.66 KB |
MD5:
c800f3baf2db3cb9de6f6067f2447b3f
SHA1: 74a2a6aacf425837789227ddd258eb2b49f42ccc SHA256: 1d4ece0375e322502a4800a13f2138f466dbe8bade4b8ceeb1fbc7410c040d7e SSDeep: 48:xP/u55EANrzidjLBspa/mNSLs4HmtH0yckAUe31JAS:xP/krzARRRjHmFkXES |
|
|
| C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id-9C354B42.[my0day@aol.com].0day | 9.51 KB |
MD5:
9deafc9c645a12eb498f8dd4d956434d
SHA1: 916c0bc9d61697b1238211271500477e93ee3cae SHA256: b17b4b2e91a996538950eeef85f2c975d89d4621aa37d232e9827c0c5f52ee10 SSDeep: 192:mjtRcFNd050o1q7uyvDs4euFKwnUOLj8oGe4VSGr3kFmEptQIVHzGFoMg:AIFNdWbAC74SwUOLj8oZhGrU30I1IoMg |
|
|
| C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id-9C354B42.[my0day@aol.com].0day | 1.14 KB |
MD5:
e84a8958a20fc18fa0b8dd88c91eb76c
SHA1: e55b40a50743edef0577664c10ea8984edf6b922 SHA256: 50d5342222aa7eda5143768528eca46bc811c0c160b694f0f50a27380c143cd5 SSDeep: 24:rzRJ5wVO5uY4zanHP5nfA+uqnW+CvrNXdDDr1S5eS+Jlc58:rzRJqp7anHPNPnKXpoeHJA8 |
|
|
| C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day | 1.65 KB |
MD5:
ab412a0720f5d592c1b1efa5403ade1d
SHA1: 71eb16971151edd602715b2195fef0b15465dc65 SHA256: 2083fc8234765f3f95dfdc4211246c9d822f6ea660fa9f3cdb205b7ceb654fed SSDeep: 24:tQttNDDdFCgl3R5CyHRAhkv+ZO1oafMed4OIjaw7RmVgdEOZIitQ8v9TmY80QJlR:+HnzCmTCyxE2+ofKO/wSOZ5QhY8DJAU |
|
|
| C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day | 2.04 KB |
MD5:
27ad45994837855c860693224dc841dd
SHA1: baa38fb51d9a9c685846a1b8273c038c1d3cc000 SHA256: dc22516ca630607476573cabe062258d5581640ec79fe6517fff654f8b5a1765 SSDeep: 24:QugYYtKzS9Lm4snZI7BtVuvZg4tI46VB6fuch5unX+sUfx0UvWqxZevNMwibCTkb:Q5PmJYtVM04Q6rs0nC3yGEPJAU |
|
|
| C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[my0day@aol.com].0day | 5.67 KB |
MD5:
b7dc5100006542b287d73cfe2623e6f9
SHA1: 43fa5fc606bc22f849ce941431a0620ca78b2637 SHA256: f3ad3489fdb63f40d60aba5eacdf33ed043ea49c2ae723292bb10c342a1365a5 SSDeep: 96:tpJhIrJVsF/zMao+kHXRcPH8VE6TgbjiSFdUeICpmu2117Ds/4bkMADn3+kvg948:XzZ7MD+kHBcPHUsbj1Immu4Ns/h3s9/ |
|
|
| C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id-9C354B42.[my0day@aol.com].0day | 1.05 KB |
MD5:
86cb2d83edc872afb5f30d65c66f5019
SHA1: a761bf914940a54a007bd4db1dca7ef4269fcda7 SHA256: 3475cd1c64c4e2234853b7dbf6fda9664cfc0975f2a837837de1f72873c2a0e9 SSDeep: 24:TPGmdBvSUSt+W6uf9gCGldles0vUvRk7SMYDLBtyfpS2cqJlc5u:TvlS1EWzf9gCGd6vU5kOMkB0fpS2tJAu |
|
|
| C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id-9C354B42.[my0day@aol.com].0day | 26.79 KB |
MD5:
34eb167f4cf97e948a0008fa1c65e88e
SHA1: 101553a704cd5eb9231259d3285c4a6a59dfb1e9 SHA256: 6bce1f83b73bd97022dd3f5e2465fe6f122b529ac0fdd37f128a05a73f39b310 SSDeep: 768:2rDKe8Did2ZvdeTYEN57t32b0lLeoZKOf2QH:2rID3vd2YEfhmAlLxYO |
|
|
| C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id-9C354B42.[my0day@aol.com].0day | 582.61 KB |
MD5:
60e465819223b1b027356be2b9d62b69
SHA1: 420a5f94f50c6c1b376c39017d72a532fb1c2c72 SHA256: 8f877222d80a77c1685b1562a910f58acc5a21f8e447877e335bb1919d132249 SSDeep: 12288:W/dik4OnlrNgp13CPLQWgdevv4VMQhpiWUMRp/I4Rs3Onn2x7jwlYjebUz9:W/BLlrW33CPfg2k7bif2+wm7jwyybM |
|
|
| C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day | 2.07 KB |
MD5:
a82aa5232adb15cdb7274f8a71a2aa5e
SHA1: f35925c03fea82d50e2449a05033927ad44aa3c4 SHA256: 86581659afbe9c19f6428955a71ef14ee58bc57aec3f52a8e6935be10b704fc2 SSDeep: 48:V2w/PpfoaDbABbEiMBSEgsC5IHj4Yph8atoMWEJAU:Qw/P9oyiElgsOIDNpqatg1U |
|
|
| C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id-9C354B42.[my0day@aol.com].0day | 65.85 KB |
MD5:
2ce49bafaead620413a0f84618ab4a28
SHA1: a2462d00ae818c7fd8881dcd5219c2f1f07ab733 SHA256: 5ab07133e38b647c6e1c6f1305a3aeecc5236bf44d7cb24e04a2f62599890fbc SSDeep: 1536:QbnP+KjqCBZiPJjHUvEBbreX/yPHpT78Q02E+B6QdNytA5kwChJVPuFG:QjjqUgjHBBbrseHybiRN4AS/hDuFG |
|
|
| C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day | 6.33 KB |
MD5:
88c47d8378632640c4f49d5944076ed6
SHA1: 23570a902b8a84ff0c2a77ebe7575b778196135a SHA256: 5a73f4714a7c3671e6b2896e7bd49f0cb608f7a380b1d3f9b975ab47aa709cdf SSDeep: 192:IZ7s5xO5412FtFuxRDnZ5YGyuMb4x0rPXg0n:A7a1eFMBZ5YN80bXg0n |
|
|
| C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day | 9.37 KB |
MD5:
73e067b8dbe00823f07f5fd6ac6baa00
SHA1: 425d8e489629cc2b5465b30b78f7dbe8d26ca96a SHA256: 4a9f4148d38fc6a090afd4a2c0aa9da4959797217f610ed35f2a1df5bfb6bca7 SSDeep: 192:XWfO11vMDPW5OrbdRZCnGNRF87AUvz4KOAeVjVOJ0gxm44RH:XWiFMLW5Of1DF875zVOVVjVpgxm44RH |
|
|
| C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id-9C354B42.[my0day@aol.com].0day | 582.61 KB |
MD5:
072ae81b60b8c1d8f14211b2e8b8b918
SHA1: 1200c837dec1068af469f383976e19f208375447 SHA256: d360422da59d8ee73956e95c80135ca729f3450d5ce686d5dc559b4c5c4002e7 SSDeep: 12288:tjRhfqY3Tmg1hH0LNSfkLc8AIBZ47lYXBn2oa6L3Rn5ds0hhq3F9/B:dpTmg1hUxIUtnZ47lYXMqLRn/CF9B |
|
|
| C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id-9C354B42.[my0day@aol.com].0day | 1.05 KB |
MD5:
b1f6e4c5ced89048f66946be097d1206
SHA1: b8afe1bb3f58fa096154fc94c75f000855b3bc1f SHA256: dbdf324766d321311b6425029a114705d7eac873781b5dcbe64b97f2beb77a9b SSDeep: 24:slb3A2oE/+SYIJ9v3jdgAWRN3OMkFD7owyhwIWS2csJ2Jlc5u:kkeJ9vzd521EXow/+2fJ2JAu |
|
|
| C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day | 2.80 KB |
MD5:
a90e6f32bd01b3c6c6580ca0d3812e11
SHA1: 5420f1f22c9ab2facdde36598a597e790be35ed0 SHA256: 002d88d69336c1e86acd1ae7841023408366def7dfbd692656c928ab99ae3199 SSDeep: 48:6VCQ7+oKk8SjmIsXxqSz1wZmQmENbOyo3IPLaqH4tJAU:6VCQl8SmIsXxqSz15QHNbOyo4PLaqHxU |
|
|
| C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id-9C354B42.[my0day@aol.com].0day | 1.56 KB |
MD5:
3081bb59f7f4b6e4773814d3d2773168
SHA1: 6873c6b473caea23af887893d69fc7570bd5d595 SHA256: 2e6907a769824d1e6153ae9b44965008982c5ce951eddc6e8004c5afb06a51e0 SSDeep: 48:7sviM/Vw5xDi7oFlPzIJkO1SjwYyteSpJA8:wt/VExe0FKRvxA8 |
|
|
| C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[my0day@aol.com].0day | 4.42 KB |
MD5:
10c4788a44c420337b9a82f336acaed5
SHA1: 61dc6ab7dc95facee218c47130782b7b2321838e SHA256: 4db61e0b588f1f8d95fd9cccdb0d493797cdda3774925b49b99f295f8ef73434 SSDeep: 96:UEb4Gn4CgwsiraQcbflE/Ea//dgNwv87yGsHtjjV1+lnS:/4GnAws8ubkXdUweyGsNvV18S |
|
|
| C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[my0day@aol.com].0day | 4.42 KB |
MD5:
430c94720582292854e95084226cb679
SHA1: 2463c74667c97295fb22952c996e9063a2bd3f19 SHA256: 8aeb4a244936fdfff063b276a2f774290fd46cfb82fd242321e1b3693e68fbf5 SSDeep: 96:4kWhhfR98ibqFxFm6JisEvitF9f/J6WDZofuXJ4S:4pfR9sFx/pPFnpD9XJV |
|
|
| C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id-9C354B42.[my0day@aol.com].0day | 6.51 KB |
MD5:
e15cbcea20cbe3d00e5b64a7984b2bab
SHA1: fcd99d4cdd646ad877d9fcf8a58c7ba7e0caca54 SHA256: 574691436b829596cc730c90736099ae8db82ebbe7bfff6a93d18614d5685835 SSDeep: 96:aXNtKfg6LaiZEUde4Hz3EUYBb/GxScSoIg7Nh6DtgeRDUPQ3q4N/9W+TRY4VNN8:Ytj2acEX4HgUauxSYIg5UJjP3qUDm4VA |
|
|
| C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day | 16.52 KB |
MD5:
c584874950720e5b904c236d62cf8283
SHA1: e4aeaac5acbc0aecdc62f0b2645ccb66aef79e87 SHA256: ffcc8d88b42abd7a8a1ef80a28dbb2d41b639f2dfd6a6dca6cda36753c3d3560 SSDeep: 384:f6q3hYBHaFqradi+r9j+6xh1kYk4XDktnIMN6rUPiRwb9:Sahs6IradiROHkYk4XDkCMhPCwx |
|
|
| C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[my0day@aol.com].0day | 4.42 KB |
MD5:
4f5e4265fa0480e5606d1d72826e02d1
SHA1: d657c5f0e000e271b514764b5823885a0480deda SHA256: e0d91348c79de30aa8bfc62f5f72043dd17fe923eec4b0f631ac3d77196667d2 SSDeep: 96:sSGFXFjNwsS7BbL3XqdUiacb2sHxIvZpE272OLgDeYTwh0XAS:sbRlNBS7Bbmuinb1ReTE8LgSYTOc |
|
|
| C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day | 20.33 KB |
MD5:
a600151411c0282cf1bc677868af9272
SHA1: 5cbc9ab4d82fc24d7f63e6198385e3f4a67787c7 SHA256: f2d5633f15759beb2a175c8cb241fff177ef730ad7ce9c0364fe2542ad685769 SSDeep: 384:G/+kZFpeJpnmHZuigjGdkIQOHQCV+JtRSYXVnzNDMb89++ExkvTWJkO3:C+M8pmEigmkIQOHXVelXVzNDMbL+E6Tk |
|
|
| C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id-9C354B42.[my0day@aol.com].0day | 8.76 KB |
MD5:
1ef08646decddb027c3fa731360ee60b
SHA1: 8af86365742adf7d430c047144be78aff9e46894 SHA256: a74a34729e6cccebf92c3eede424ecd41b8165b0598dd862741ad717f08c8b6e SSDeep: 192:xogNT65p0oDNHhRFvQFyF9JyDQRMgWuHq7xPT2VPhFQDln4eb4BvsN1PzQ:xFZ65aiNH1vJFrZMAHqtr2lIl42QvsP8 |
|
|
| C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id-9C354B42.[my0day@aol.com].0day | 16.70 KB |
MD5:
0ce79e9f3632050d99ac1d4f72c40b2b
SHA1: bc03c752a65530c496b3e01a079eb6207cbee73f SHA256: d726e86597e74903335c566cfbbecec38747c38ef203fd49273bd3b5264dadf3 SSDeep: 384:99BmreNvBZGh/ylkxcBqpZfXuNQFfHvZELEpo3FZ+Xbd:97mrSXGukCBq+YHveLaSFZE |
|
|
| C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id-9C354B42.[my0day@aol.com].0day | 14.94 KB |
MD5:
dc66d6902df92185da1c8e19e830858a
SHA1: c546e7dca1cce77558920ece06b1854a414c39b9 SHA256: af0bc275e79bff4cc9e323e27f26e7df7c6e7e938b46f0e1970ff9c29c249c6b SSDeep: 192:ToSZurb8E27oqpSHBfP7B381oldAkT3RQd7iUiLflwv1odrDirXxb9Q9lfuO0993:OX8tsJ2ocehe7KnrDi7S90LphYWX1tm+ |
|
|
| C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.id-9C354B42.[my0day@aol.com].0day | 1.27 KB |
MD5:
a3ba6eb2d824933c01663c6f57be58be
SHA1: d8fce7031023bf601592be290766beade74502a6 SHA256: 1cbdc02855ec799e3ca6df96abff3b68e0d57b0f8f7f7381e6eeb3edc15b8775 SSDeep: 24:UBJfAwb438aZ5SyJ1+imfszk770KqRzPuI+J8lcOMSrjuSJlc5i:c4wEvAbimek7CdGSJAi |
|
|
| C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[my0day@aol.com].0day | 1.88 KB |
MD5:
0a6f446f7c147f3614e410af38a354b4
SHA1: 43bc6eebaae3506ee1ef2308d51ebbf0b7442cb8 SHA256: b5fa22af2490da2337d0ed4a5bde079944c55693c8eddaf91c5af2b3696bdeb7 SSDeep: 48:M0rxvoT8LsjHVRmUBdU7/OmINHYtYsG+jWAkgJAi:M0STUWHVRp4lItYtei |
|
|
| C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day | 30.60 KB |
MD5:
f98054adce3ba57f3b78101dd9b6670c
SHA1: 72c47e5a71c3af7c9a35a0a6b71f04991c0039db SHA256: 93f5a641ef1f39a2f449cba3935dd375ab0662712189fef847810ef55ddc5e59 SSDeep: 768:FLBmMUh1sJRsxweWBtii5ruhdqszeSQ4khhcrJ5:Flwh1srsdWnuraykuJ5 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[my0day@aol.com].0day | 1.27 KB |
MD5:
cc6cb18c3f6a22e7c19989957d3c7346
SHA1: f7c567bb05998043bb2728dc2ede7566f2f3e6eb SHA256: 79d37c4257e4e67952baacc57ab6667f2be55be23f4458bd732bdd70454e2555 SSDeep: 24:hA8X77mQhKX0ifu5Husv06yQ2AyCcceaJpODXlYrtlUiWJlc5i:2K7/bifullyxL7cLg2cJAi |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.id-9C354B42.[my0day@aol.com].0day | 1.56 KB |
MD5:
5f13aee95ffc3dde33cd14d434c9c6d7
SHA1: 247aed6bead3ca2f87b93705604ea8035edfb077 SHA256: 2a00a9cc61c3c4c40a35be003753107316316397b1826b44d7d1d9628561d3c4 SSDeep: 48:iRjcye9Ft7NzHRoMMn+yzLPzlhLAT5WxNLaLJA8:iRjUf7NzHRoM87bl2T5KNma8 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.id-9C354B42.[my0day@aol.com].0day | 1.05 KB |
MD5:
d5c95e60e3ad438695b8fe10d7b93735
SHA1: 9f23a6ad83d5832f8285e4efb9c117b28323f74e SHA256: f4d1ce88d01a1d7d2a71306fa1129222bc5ee9d2cee2ee559c453bedb61e0c69 SSDeep: 24:FKw5w2tQWBjl3qAOdFj3W+lZfzWS28rbJlc5u:FN1qR53vvp2qbJAu |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day | 2.80 KB |
MD5:
a00c23177c84fa2c019e0a4d50957c3b
SHA1: 97eebcc50b15e64581d60aaa85030c3963d90f51 SHA256: d4feea2af3bf4d2d7db06165105a4a793d618496ce54b7f9741edd169ccdcb4f SSDeep: 48:YSlTiXjYYUkS+SZq1lAbSw0CZG+BpaXK4/1yCaVs0l+Gk3SVemyXdC7Q5cIU0kJ/:YSlCYKQq1WH0CZpBpSK4UoOEBCc5cp0q |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.id-9C354B42.[my0day@aol.com].0day | 1.76 KB |
MD5:
509a8ff99daecf9ae32d296f3aa95a08
SHA1: 99c774e8024e044f2b8390f269bd8ceebadac7d9 SHA256: bf936b108eacd35229bcd00cdbbc72508c55d1b8940e5858389a9814f6a0c685 SSDeep: 48:d9jBNPZwQwkbXgUQ45kFh5Dhawk56OdhNQOjupJAm:rbh9wkbXgUjkFPcL5DdF1m |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id-9C354B42.[my0day@aol.com].0day | 2.13 KB |
MD5:
1a4e0f0bb4b4a46e46cae84c7e47adfa
SHA1: bc5517a54b8fd68a730cdf8c16a94cac84ae8326 SHA256: 5c2d47dc973efbf20393b179f643ced63d36e398dffefb377d3b19f53712bb11 SSDeep: 48:L64FxECTgj4q99ilUtMM8ueQ1TC6L8f+cVltK2tUxL727JAq:q5j4Q9ilDM8ue2TC6L8mcVP1mxXFq |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day | 2.47 KB |
MD5:
43e1937b26a7c99e7aa7d23a78e368d2
SHA1: cb416b11b742daf58a610db2db254cd6e52890d0 SHA256: f9743f1a21ce72f671d66ed8059adcd4207cf59baa64047e65223395d87228aa SSDeep: 48:CenwmF5fv0nBbgDdnNL62czLX93kKJ1y+hKn+x0WR72ZTSZacJAU:PnwmFpv0GDVt2Lt3xLJSWRnadU |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML.id-9C354B42.[my0day@aol.com].0day | 1.44 KB |
MD5:
a081dc15fd0586823c0a40049c9d23c1
SHA1: 1008b4f6e957d13de7f9aeb0512481e5ae0853c1 SHA256: b7c88e92e894ad994061f28346974c40623c4a9b49c9b8c654b2cccebe5711c6 SSDeep: 24:S8SGSXLxMU8Go5KQRtNaRQGHpGYD4oap8mVqlAJpfJW1zc2l3Jlc5Y:S8UN25KQ7NqFD4NHTZW1c2JJAY |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day | 2.04 KB |
MD5:
f37631cbaa93b62fa6f838e25963566f
SHA1: bc1deeed95a255bf9606f6276dbf4c2154b7149f SHA256: 07dfb97aaa94ae58506ebd8d87a7cfbc44c0329fac143e43e7e8f8e488a030c2 SSDeep: 48:iEDhCJzWvWpeykrfDQN3RQlRYdbBEYF0DMqa8T9vJAU:iED0t6HykrfDMQlRBY2fncU |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.id-9C354B42.[my0day@aol.com].0day | 582.61 KB |
MD5:
fb4552f16a832802a243926175d367cf
SHA1: 84e0fb2d9ef84c4248770d377a439d6cac7b121a SHA256: 0351a26049cf3699b941435b25f52f2eef797615fd919a7aa9a7456fb6acba73 SSDeep: 12288:3hYsno1UA2snqEJLiWhfdh0aXYIeUxqoy/EHnA+BDVzdJxuJA:3mAmiWFaa6fsHAGVB3P |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM.id-9C354B42.[my0day@aol.com].0day | 69.80 KB |
MD5:
076c013402906793a414c29851d19da4
SHA1: ac3fab91d50c84f55190a1f77348f191ec372baf SHA256: 4306ef4b9469bc83c1f2a0340319204bcf1c7fcd5a10ecbbb3aec5868e58480b SSDeep: 1536:CsTFjL2025evnibdOLSZdrsEj5XB+RrSuvWj/lz4q5uT:tX20fPedZBsAru/I/uFT |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.id-9C354B42.[my0day@aol.com].0day | 1.05 KB |
MD5:
071fdeffd2777bfbf0f8e31c4266768d
SHA1: 187fbb13dbc5fa3051344d27af345917974459ec SHA256: 426d8330600d733aea2692a824a6bc2b526cdf122045a5d09d5e88e343c5f9f6 SSDeep: 24:3kXqAzJxdkkL5tWAMbdUZpEDsLQAzaS285Jlc5u:U6AzJU++dUZpED2zaS2SJAu |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM.id-9C354B42.[my0day@aol.com].0day | 37.04 KB |
MD5:
6becdc10bc30897612291c26be821e11
SHA1: b14321d32f91980396f3bca34bed6011af5c34bc SHA256: 9db42c57efb781004d7afc973ef297914aa4d3dbea36b637dd3826f3a440f975 SSDeep: 768:ZWCG3iSbMGxdNaybJvPYqoQF+wzc5osG+o990PepBHiKNXFbsipzrjgAKWt:IzfMlwY++oL0KBDhpzrjgALt |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.id-9C354B42.[my0day@aol.com].0day | 26.54 KB |
MD5:
ff7451e597d38555381280f75368cb7a
SHA1: e224ccd1e8a572a7b9ab3012c8c4c0a77e2d0d59 SHA256: 32df5b707277e328fa240ac81f7541580fd7c15d422afa138102fc03603f3a23 SSDeep: 384:NoCdzDeCq3nJm9Pb5FOm7XAmCIoGmfU+3jAmMliW7PDZosP9o1oGGXgqaIoTD:X3qZmpfTA7uGKliWD6Y9owMTD |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.id-9C354B42.[my0day@aol.com].0day | 855.24 KB |
MD5:
e2e9739fcb29776124340095cf7fdf66
SHA1: ed18f6aa6e158fa3a629c86cc1db71146139c8d0 SHA256: 032ad19f4f6b9ec4a2f83f407b0e2ceb23041f549b661f62fd5a111bb4fe87fd SSDeep: 24576:NMvFI6lNkeJTGqtHd+wrKrqWLyZUtiCBDJ:NCFIcNke5GqldjEu21DJ |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML.id-9C354B42.[my0day@aol.com].0day | 1.14 KB |
MD5:
0ed3c3e6d7103be50efec871ae853a48
SHA1: f03475baa0ee715f4badba279d494dad1b4f67e0 SHA256: b62e494a4515d6f333b69810da6dbdf28e3289cbd13a98c94d4473867cd843e5 SSDeep: 24:QWmtjdeig9uJsRDPfvB4y663D6gvrn8m+PWEslsYTJlc58:/mtjX2umRDPxvtlpEsCYTJA8 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day | 1.65 KB |
MD5:
6c4f052f01f2b7b7891d9b681de9b79c
SHA1: b85b8c40a4753999b339dc909e50c67b541bfd3d SHA256: ba3d38c20351e7403c944fc18160e2105925c2b60e0cb2e1342f145810843dfb SSDeep: 48:QWVmA68FdkovXEEBz5eKnjVzKcr0gPFf7l6LJAU:OA6Gkov/LBVzN5f7l6aU |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.id-9C354B42.[my0day@aol.com].0day | 26.79 KB |
MD5:
5884d047ae0451c2ce554a132ad71e0c
SHA1: e318b72e99261fd3e6e9ccf149ad1ebb6fc040b0 SHA256: 46b0ad42b4b208f61112c391d6dab8acf5eaba32a40fb107c4b82d34ecad23c1 SSDeep: 768:Pl6drxuK6DtArCq2uTDuNmPqr/833ERKZV/fyFYDt:PSxQeCq2uTccqz8kiVyyt |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day | 9.37 KB |
MD5:
496fe9c90729bf232ca88147289a2321
SHA1: 4d7e6e6a48c18f3650110d1908c701d9c895ccc2 SHA256: c7c2ba710f0d990252d77fa92c32956ddf7235e9905e6d377c68a13856483f4b SSDeep: 192:Sc4W25ZcUfDcL92aDqVokmkV8SZwjMM4Mys1kWpphu8324XyhgqhHWZLs:SxWKcPqekmkSSWzQs6WpK8rCDHeLs |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.id-9C354B42.[my0day@aol.com].0day | 5.67 KB |
MD5:
8fa0f009bc04cd133e16e546d32c265c
SHA1: 56ab6ae957394dbe4d3967bde94edc4a2fc988ab SHA256: 96a5339a37971abe2187f9249fd776fb593aac23de4ccbe6765cbc252fcc1b8e SSDeep: 96:TONVR+a04Gn5fwr4Y0FvvTlqlBv22PHkUfPoD5YQ5GlvC/oRRxh0tWsiiuM8:TOND+74GdwkVvTlkZ5f+q7RnPh05ih |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.id-9C354B42.[my0day@aol.com].0day | 860.74 KB |
MD5:
cf0bb7d0aaec21535b0681e14189fbca
SHA1: a899a45a50171130d6efc59a683e627b5a6acd0a SHA256: 3868499e0c107a80ff9327e81a05910f899cb75a9cc39f726ba3b2d0682ec92e SSDeep: 24576:0VUlUamqf5esc7yE37oCw1QZIDpgUJkXF:kXqf5w2E3EClusF |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML.id-9C354B42.[my0day@aol.com].0day | 4.42 KB |
MD5:
bda00e9ca0313ae85e235de03e566e8a
SHA1: af9659952c7ee27369ba22c26c64b0fab34ba5e8 SHA256: 8c0a538afc98c277502e0e9915abddd305416cdb8831d7b0d6edf17742de834d SSDeep: 96:2mydRH7Bh2956TC2EA7abt+tv1mrDBAeVWZBer0MyVE4M7qS:2dV295Lbt+d1oHm7K |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[my0day@aol.com].0day | 65.85 KB |
MD5:
95de836024d6ed2d8e1e0d714bcdab12
SHA1: 54e73ef723c093b6a2f4129dcf6d6e522d3981a0 SHA256: ed79ff191bd6f64802624deb0a1c679b56d74dffe2917c0ed0a8a11fb22bce5d SSDeep: 1536:zzvw7Vecxw2jBQk3/mpIyblVbgdfiwM+woFGwmaZ8nhUoqa3pbeKxhar:/AeONBf3+2kOpIaqn8iw |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.id-9C354B42.[my0day@aol.com].0day | 1.60 KB |
MD5:
a87c4f2476d71f3682bf8148ab99b911
SHA1: 902deddce0a384788c4713dc24ee93d1faac13f3 SHA256: 4c7bf65955a1cee2c5ea1926924e0d0e5c2b5fe5da58af20b1e1421ab6fd05ac SSDeep: 48:cocNEEP5ricURM1uX7bvRyw+YKz8D8xBLmU13JAY:ZcNLBBIXBywwz8+lmxY |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML.id-9C354B42.[my0day@aol.com].0day | 3.36 KB |
MD5:
c5796c6865fb582e180ae0f4164403d2
SHA1: fe6d07914509bf5d6c1d95a3dcf83a0ef2b71433 SHA256: 0f9851d643af6f942ad3e372ca7970da49aa37a5efe823dee79df4c8fefcf286 SSDeep: 96:koBU7BkD6BJICzJkN2z6FhEFdLDKSyT6S:kAU7BkD6BJICzk2qEXQ3 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day | 4.33 KB |
MD5:
b684ca0bbec7a076e5515bccf7217e01
SHA1: f3cbfd4217335f6f03ef5491c16534934f956578 SHA256: 542c73c9b82d299d8d5b9c118eac937b62396c6c241b7b27bd9546856cafc302 SSDeep: 96:I6f2RM4Sa7sAgPHS5q5/9JVKgd1CNXOykNc4J3HzsJ3JU:X8xS8sAAS5qxVhvCjkNcgJ |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML.id-9C354B42.[my0day@aol.com].0day | 1.66 KB |
MD5:
ec1eaebe1536be73e0766eac4569e283
SHA1: 695103f93ac8db81063ecd5ef281c76524d84538 SHA256: 185ab22000be57d95d2cc2439fb6dc1ab7ee3cccbde8844c3a925f86639c3c23 SSDeep: 24:XmXHoH9kvIdy8DO+VO9GOgldAJdTqrMF2iMvr5t5B4wFVtkANEft8YtlGg8Jlc5E:X8tvqdOtZ3qr0Mvtt56wFVlEHtohJAE |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML.id-9C354B42.[my0day@aol.com].0day | 1.81 KB |
MD5:
258aaa79777077c2761f244aef65e583
SHA1: a3b292b576c7626564158119c2ece01cd6633998 SHA256: c20a98d85669a3064d5b61fe0f8e23f3fbfcd115e4ef11a5fffba08094f958fc SSDeep: 48:6mUDXWSX2DV171B2JE50wNyGU8oK0Hf9Sgk4FJAS:6/zH2D/71B2S50wNyGFom9S |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[my0day@aol.com].0day | 6.51 KB |
MD5:
a0c898e3acc89777aa256324f858d077
SHA1: 44d01512e630ebf213a832d66ea658470a5b6501 SHA256: 82c031d4ad5b1d93966102261789ee0c92058412d061788982bba48255cb0ad1 SSDeep: 96:3g3RJqcAh6BQ8gPCf8sEwXdXtpn8Wo1/xjybpNlfr6K2jt0YD2yR2SWDxYL09zEl:wpAhDl/NwXzSJrjyflAOY6yRWD7gqC |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML.id-9C354B42.[my0day@aol.com].0day | 16.52 KB |
MD5:
ac2191b3e64a90076f028e1c61b0bcb1
SHA1: 202d7c345418b648d8779719f821520413e0498a SHA256: 0de7148781e86ffc121f18df9efc3a889770ba137ff6752725cc20db5f6f6438 SSDeep: 384:y9y/l6aPsCYUFl7kDJ3CRkWzbowFZ1NcrVnsQknuna8n:yEPsP3C1/ZU+Qpz |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML.id-9C354B42.[my0day@aol.com].0day | 1.66 KB |
MD5:
550b2dc934ba00c0c04d892e34c80491
SHA1: efdfc7991938a030473ddc9b2f69805b427d33bb SHA256: 9934b234b60f5f179675661f0b1fd3b53618159ff624777d568da7676592b54a SSDeep: 48:vDK4d8FjW/xA2uRVnyQSkpSd3BGF1Kv5QMtJAS:vYX2E1jpSdRIaMS |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day | 2.54 KB |
MD5:
7b34fb241a57b8e0540faa097ea1831e
SHA1: 3e5e56cfb2cbeff93be880019325063cb5141779 SHA256: 98ef1958f254dcebb77049316284eff9262992ec5141017df56b9602be71cca3 SSDeep: 48:/qSNhi2b0trdNYXOBNwSoaFIHMowumc0AsoQVcWBk9RBIC4Y0A43ymJAU:/qSNZSNYXOrwSPylw9cf/QrB0ICD6yHU |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day | 2.18 KB |
MD5:
710a688c7fb9ab3a045ef388f59b684d
SHA1: e01416392590cb639fdf7dfa79377cf4575c8aa2 SHA256: 187d9e05030a504b0a8e6cff56a0e6bcfdd149944190e2c40965638173fe54c8 SSDeep: 48:3v3hOeMvTT7ONna/yF+yX/rrxv7mJxeTExppXXVH/o7qqxCJAU:/3hZMvv7Opa/y3zCUEjQqqxLU |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML.id-9C354B42.[my0day@aol.com].0day | 1.55 KB |
MD5:
3bba82c6c4c33524b92ddc5962eeae98
SHA1: c386e29f689bc257803582dc383d1befb6423e61 SHA256: 9067be9fb5f5513ebdbc83f3938173186dd08e0307c74cafe4fe6601f2f2aa72 SSDeep: 24:8pBxxos5nuDt+lEEWESWrJA4DGJKcPVtjn3PQK2SZ8lM9jrBzao73NavJlc5U:OBTfnuJHEOuJA4DUrttb3Pp2MDyvJAU |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML.id-9C354B42.[my0day@aol.com].0day | 1.66 KB |
MD5:
b59ae3eabec5961d9b60b59eaddfd6cf
SHA1: 595830edcc69d3c69d6f0f68a4e1d4d85ec0d8a4 SHA256: db127deffeec02394aa0210fc4b11ab5d56b54071e5160fdf8e3e0f870a59627 SSDeep: 24:eEO1hKgvIV8buxuGfBxh0o7rQduLPlsXqbkBLl1J126NzNaMnE8XXV87HCJlc5U:evigvIV8ix/xkuTldb8S41PX3JAU |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML.id-9C354B42.[my0day@aol.com].0day | 1.66 KB |
MD5:
7b642f29adc41324b28ad179d05e721a
SHA1: 4bb9990ffeaba5c46f8e2fc81b8172c586619da9 SHA256: e3dba455015d7fdd5fac078db90a647d99dc38ea6e38cafb5ee1f02699ec77a7 SSDeep: 24:pPqpZZcbV8BE8l/UcCMrcfo26FW3UEij8QwdB/EN4m7mrBo0buBoKvyeAKJlc5U:pSfgV8+p+cgJZEij8JB/k4m7mNigeJAU |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.id-9C354B42.[my0day@aol.com].0day | 1.03 KB |
MD5:
a7cb1bf9c2f8c0e83ec17174920ecc87
SHA1: 187769aca1d6c640a3d8d95be5191897f5d68159 SHA256: 83ca91268d177b1e9bc4f575e51f4c113612be07870cf052c78ff3537a717c72 SSDeep: 24:iWeJTcotnuncrPHzNRgatjOj+tvfDAn2aj4vJlc5m:iWe1gcrPHzNqatij8X5acvJAm |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML.id-9C354B42.[my0day@aol.com].0day | 16.70 KB |
MD5:
b76fd15410ca418a9056b6e7004b3159
SHA1: 29f2401254f825a106a9727424332f040e76fb09 SHA256: fb75956a3f4678aca5afabf5e27e31efc54debe208b49f12d06e8b5eecfbc1fd SSDeep: 384:IQX4qYsC/FBrpYVoqFsRIFPXbwW+cjYuOzBEyM4WhKWp:IQX1Ysi3ryVo1IRxSMd9 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day | 5.97 KB |
MD5:
3e99a9353e58bdc72fc4918955964c0a
SHA1: ae41a184ee848bf71bdfcba94d4067470ba56f5a SHA256: 4511f41c81f0cf0367606ecbab902cc34fe6648d17550e8fc7ede7ba8afcc003 SSDeep: 96:Zwd96klw7hCKHlvEQcOY9hfiY+jG9mvX09ud8SV4K+Hn2giAZgqoBcyUwcpFsDnr:ZE4kO3HdEXDfb+jGMXJd8SV4rH2gTgXN |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day | 2.07 KB |
MD5:
2849d692d78bc040cb194f25ce8964e6
SHA1: f38945983c7f067dc1f40269d0d0a32cb77f2918 SHA256: 3970e5f4a8d4a92c5e78ec7b36440af80499dff3198fb9aa8225122078a2419b SSDeep: 48:6pBzum2ZXXOhuNejLCvJ5S4SrKZlyOmseJAU:CumjhugyvvpKKrFvU |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day | 2.07 KB |
MD5:
11e5e66b97642773905e569d43ebd784
SHA1: eff489eb0fa96fa85a1098e43b78d4e3021e16d5 SHA256: f3a077089834a7a27dc50d7b7387bead2558e50593e41ca9333d2182a60c549a SSDeep: 48:YG/dOYkQZJLDlDPB0DTm/hcBJvarEUhsKa87el8f99JAU:YG1fRVdPm2JUwrEUhsKa87+8f9cU |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[my0day@aol.com].0day | 865.24 KB |
MD5:
2723f0e121498c1b822070e088d7909a
SHA1: 066344f67d9740902a51c24fa7f23c3b90a1053e SHA256: f23360d231b7d3a2c2d9fd9b7c5340fc5497dc9677a2688bfbca0e3e8bcc2243 SSDeep: 24576:bQmoSxJ3cQ8DVwisRSGUqXcV6Xgk+5h9BjU+hZw:0u/sNwiMSGUqMV6wD5h9BxZw |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[my0day@aol.com].0day | 30.60 KB |
MD5:
1440a70f39150894fccab34b277d7178
SHA1: 4f96c0d3c29e49850879740004fc6f6f1959bed9 SHA256: 121431fe062c4bff338bb469f7e31cbdf3dddb592c909f68d3b42eed9d3a00f5 SSDeep: 768:/cDY/YTfMTnhPSApvCZBG1I+16k+ueR65fPLFGkzR:/ccgTUTnYavCZBG1I+su5HxBF |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day | 6.33 KB |
MD5:
6c090685572249c3d3e6b72699f35635
SHA1: cd2096736fb680e5cb972946d4a80f911fd5c655 SHA256: ce82dcc5340a85854004eeddb84b7e151622cb128f28dcbc4574febf45005fa8 SSDeep: 192:8zZjAN8PZClTvhmR5CTQoeesJeSYdjjph:8ze8WTJ/TRvsJeSSvph |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[my0day@aol.com].0day | 20.33 KB |
MD5:
e38b4892c6f9c6833dcfee8276e6b1ab
SHA1: 40793fdf1a65dfc7a356aa0711d86884fec70e6b SHA256: 66bf16fc1c9e2ac2507ab1f24874cd0c1e567b208229e2de4ea431a5f279f66a SSDeep: 384:Pi7ivD8PqHb/TJSsksTvGUqMgZqAFRgRJcxFr7tGQvJSLv/nxLSSdHDHSMDt749H:Pi74IqHb7csnePbgAFKR4gDxLHHDyMD6 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML.id-9C354B42.[my0day@aol.com].0day | 8.76 KB |
MD5:
56a305766bee94901842d5aa0a1bacb2
SHA1: 8b304c2301dc050110fb0e02919df59b1de3eeb6 SHA256: 47f7a76aca41539f32e457702e4e7c62610d7a9b376528236cc0a6f7b7614dec SSDeep: 192:LE4Sq08NESPMfYuW6A8Jt4vEADFHT1gsb6af6uActNd2dLmTBn:Ys+bbWx8Jt4vEApzlXf64m+x |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML.id-9C354B42.[my0day@aol.com].0day | 9.51 KB |
MD5:
d98ca6e5166fecb2559ed995ff1ae7f7
SHA1: e360671feeb4a740cf180a11568f3ea367b0e3a4 SHA256: 5a723e453970b47ab0ad6c9fbcedb5d2e765f48125523c6a30c76ba94909cda5 SSDeep: 192:+RqX4o726cswtQSCa57FdLa6R0mhcZXzRCVVwRLlDugtDsB3+kbl81:HX4o72hkRAdLaBD6uRLligt8OeS1 |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id-9C354B42.[my0day@aol.com].0day | 848.75 KB |
MD5:
9bb554972e9ecf982db4804dea0513c5
SHA1: e8df0650de9dd81faa32778d08cd597f5cea65b6 SHA256: 01e3c9b8c8132f6e648ff3732e23d002eb2677735b0e6f1f3cbb0f7a16d665be SSDeep: 12288:s6QgJ+LrhCIeerjbO5GJwF6NYGNypLEl8mEau83IbT219CvdESrXgZuZA:vQpYIeUjbOQwF6N1u08dpbKjidzXy |
|
|
| C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[my0day@aol.com].0day | 853.75 KB |
MD5:
8c7b26a37b66d61f9957c349742dd94d
SHA1: 9e98d37bd0d4adeddfaee57de58e99ab73e8f617 SHA256: 71ef3e427de9c043c6552a72015de468fa0985865e67e31923e72a51886257cd SSDeep: 12288:6nM1EvdoDs6/dSu3LVZAQHqQz9rfeB1+FtcOprQrVgpy8Ohaq3FoJQwltGoR6bcd:6XdoDjz3LfXJfXtcOkrVgpybV6QwcQpX |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day | 2.60 KB |
MD5:
d904a3917f3af09538beb5dbdcc178bb
SHA1: 8e5b9cfe492db9f5b3f760586fd40be49b456f27 SHA256: b41e4598f7aab7fb727a98ccfd3f5404aa6c3fca44f654d2b9ea70006334286a SSDeep: 48:WVZoN9ac1omnEaRRHFsl/WbyLL1/usJudvPxaW6YUh+K6Q8XgYJ2p9K80JAU:WYg3aRRHFQWWX1/HJudXdz0+K6QRYcOX |
|
|
| C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM.id-9C354B42.[my0day@aol.com].0day | 11.43 KB |
MD5:
06306e7cd12d51ed08992b95fc7631d7
SHA1: 9fce851679e5ecd78cb0a9622cd9234e321bbc71 SHA256: 528b34e617d16e404416fe0f07c3f631e4bcaadd9d6c9a4d530b2c3d47cf55da SSDeep: 192:GfYyxwLaafoLddAOgvRA/0vL1PQ4yzqMY1qEeHLJqw0L/fNXVC6tmJ4UP+NTw:GQg9JdduvRA/0D1/a3zLgwItQJ4y+Fw |
|
|
| C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML.id-9C354B42.[my0day@aol.com].0day | 8.94 KB |
MD5:
e672228f5fd8f4d3c578afaf2503be40
SHA1: 50cfe4d3a5048121ca8ac37ed15d37c18ea5697c SHA256: 4e37eb95007901cefebcbe812ea88cd99b7783426494dc8584f10721980b7387 SSDeep: 192:fNmpPqyGkD8+vNrA/W9QNg0X+yWO9ayVd7rrebjjwNVyl/Z1p:fN8hI+vJmf/eOJebjWEB1p |
|
|
| C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML.id-9C354B42.[my0day@aol.com].0day | 2.04 KB |
MD5:
de22c10d5d8961f1c3871fca1c59b40c
SHA1: 7526e3afc500473f02bc378636a1512c4b6f26cb SHA256: e3026fda9816c877d92ff6d05da62bb22166fd26143c2583e0f4456790ccb0e9 SSDeep: 48:KP4qfmHMcq6DaBpt81+O30SIAJAqaC4uu5kRIxZOnnJAU:KP4qfmsXKaB5O5za55kQu+U |
|
|
| C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT.id-9C354B42.[my0day@aol.com].0day | 38.34 KB |
MD5:
223e9621b920f97e7c3d4d99bba69977
SHA1: 0e98b3dba89238f01eb907fb732570d24583f4bd SHA256: 01a72538fa501a64c27e525f4bbb96ada3777a7250038b2aa8ef139dcd9453d1 SSDeep: 768:3CS8eWS/LFpU7Cy7B4buNQQ3WXVfKVX8Wa9HalQjTVWaNSOfeuJHhrd:vfWmFpUh7BkuQQ3WXlOba9yOTVhNSOLP |
|
|
| C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML.id-9C354B42.[my0day@aol.com].0day | 2.85 KB |
MD5:
25d3dfe8fcee290170f3435ba5fe6e1d
SHA1: dcfdbeeb0a14980217415cf9cb3205f7131d2faa SHA256: 1bd5c72e91e53baf72746c30155018358f7b6f06d1bdf23885bdb5665f0be777 SSDeep: 48:9gYFyfgCmRanLwgTGvDluucK/ZkZm5nq8VSIpz3jBMP7tm5tqzrRJAq:9g94UDTauKZcyXaRm5Yz8q |
|
|
| C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML.id-9C354B42.[my0day@aol.com].0day | 8.60 KB |
MD5:
604858c075dba77968710bcc20ae6544
SHA1: 52f72b6a749c63f5eddca00c106197311963a77b SHA256: 66d6faf8041ab8efb5dfba26c2d1ec2141cfef2d5dd105b2b9f3c89f8f4b8893 SSDeep: 192:6Hsu4x1witat+jYaLmB4p+bARiy+HNg/zdkUjM63c7eICk0h:RueESmSp+SCIGHbqIV0h |
|
|
| C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.id-9C354B42.[my0day@aol.com].0day | 222.21 KB |
MD5:
04d570bd71e4bacc4bc00dd8c2bd1ed1
SHA1: 9a342d57b926352b7a2d400c69ac0f31c8281743 SHA256: 760d69319f9a164ee292851c7ab466dc15b622137de966a632fb427a8d503bc9 SSDeep: 3072:oYF6gaA5yFEvNMzKkmfjUPUEbmmxP5SzH6NfIviLz3e+SVsXCg836i9/e/c/c43G:eW5yFEiKfIc0xSr6Nf/TXCP3jQQ3FYWG |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML.id-9C354B42.[my0day@aol.com].0day | 1.99 KB |
MD5:
d3bfdc0e17af6dad3a332e9c5120d984
SHA1: 3929235b8fbdfd6ccd5d9a621b11ab99b5e56420 SHA256: 9737d070fdde62955f2dc2a462b418210d597a4b4fa52aae5d61361e61ff63a5 SSDeep: 48:/pw/lWwSKCGjctVqoF+7edVw7TcrtwosWPjBbL8PImOjJAQ:1ojcaoFndVmcBwosABbAPbQ |
|
|
| C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.id-9C354B42.[my0day@aol.com].0day | 890 bytes |
MD5:
019bc44ee15f077136fb9ad64d155baf
SHA1: 6d738622bee12f4164a354d3f71e8b0064a79717 SHA256: 90967010c2cb71e3d49121871475cd9df5255697da69d75754eb63ee1caf1df4 SSDeep: 24:6IJiTpocxaYTuPPagbxN8S5JZlbpJlc5Q:6RVQPnVN8SjdJAQ |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML.id-9C354B42.[my0day@aol.com].0day | 1.66 KB |
MD5:
dfd2f2d9ac3929a6e5d61bbc23381682
SHA1: f62db8a9449c63af43b053db292eaa638b1a102c SHA256: 9f2f736b5fbca80606e24e883af32697ed18cf8a1540dcd66d96b9b4178d7068 SSDeep: 48:6oIW8VuwsXViaEdvtojQkR+KE+wZs8w81Qtxu5+6jjQc+XutYJAu:6oufsdEdejlRVwC8w8y09fPDu |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day | 1.80 KB |
MD5:
dc2d69dd4b3bcc9fb1ebf408611f18aa
SHA1: 6d9eaa465a3fbf89982e36d88417ce0b72e96630 SHA256: a446c37436468ebe0bbec7c303df3350fc0f0e5e8e7f8b4b938c1b7b1e2dd25f SSDeep: 48:APjGJODvcmbPtDrI112kMuOSn5wwaRJAU:AP0ODEm7ND+n5FaYU |
|
|
| C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini.id-9C354B42.[my0day@aol.com].0day | 378 bytes |
MD5:
6300f8b8e26872078b2bd235af0aa850
SHA1: 361aaf8307fd4d8dd327fa62d092b8d5dca2b248 SHA256: 30015266457d0b51229d8370aacf211f62516703bdbb7153c6d689602bee846c SSDeep: 6:xgo9t9lngDfgur3spE2IFtSRLIUw6WCLsO9DkAi1TCwdSKJl/AP8hq0aQtve3QUQ:2ZXcpnMEpDJdDkAiZGKJlcIQHQ |
|
|
| C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[my0day@aol.com].0day | 16.94 MB |
MD5:
2fb10a322517f7cbfb3a6cfe3f7ec571
SHA1: f50dbea0bf05e4a4f73abb265fef52fa43db4e07 SHA256: 5ef870f132dab830dd5380a5f66f2db9ead790ee6610fc191c638c2aecd616a4 SSDeep: 196608:6a8A7fKP0ReD0wXKLUEfRrDXP2ifogB2jHcSBLWiyvyWJRMLhdPWfi:6aRDKP0q0wM9JrL2ifJcjhW/6vL3Ai |
|
|
| C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[my0day@aol.com].0day | 3.14 MB |
MD5:
a6f76856e284e6a48b8782e8d30a3dca
SHA1: 3e31db4c441bdc879ee78aae7be7866e16e0e2bc SHA256: f64d32ce9e7ec66ec18cf5aaac7170429abc0779f4c74b7b6b194ad1fa60cdd3 SSDeep: 49152:zDxL8QBo0Tex4S120ytJyWeD6c3MgniBX5vvCToQqg39:zR89t1uXccgaX5Hq39 |
|
|
| C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[my0day@aol.com].0day | 3.14 MB |
MD5:
aaa6a48b83b1b34dc8a6bcca4d0c1a52
SHA1: 87c9aa9f360e997ea857574865cc9385aa198d2c SHA256: 09628839eaf56cce3d119c0fec13178187d16ec71c958d7396786766647bbeb2 SSDeep: 49152:zDxL8QBo6Tex4S120ytJymffH37cc62ZK+BbJf99+zamK6r:zR89j1EfLDxB9f+r |
|
|
| C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[my0day@aol.com].0day | 67.85 MB |
MD5:
6b078cbccbab0d5edeaa1d85f11ba58a
SHA1: 66820f091ea72f244d2d2019748cbda0b7b9702d SHA256: 7597007b7fd82fa6fc079ad255cc80561c20be4bc515df7968b4b0e377292774 SSDeep: 196608:H4KKCX5FvaeoDcBdxmOJR7nxOKOmE7dzaNQwr:H4KKCX5FvaVczxmUJnYSE7dzAT |
|
|
| C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[my0day@aol.com].0day | 10.25 MB |
MD5:
8b8b1da983d8267f5a20828612cacf5f
SHA1: 91c1601ce43b768a9a0cf4cfa8b28debfb9d4292 SHA256: 4a481d130f4d5941661b506bacbc2b71a31c3b66fc95113cdfbb1c78ed3152fb SSDeep: 196608:aPUvTYpH9RBl/tus7o4L7tZiTnp/jE4U/bxlLRx+R8Ep:MUvTiNhU4L7tZiTnprP0txRsR82 |
|
|
| C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[my0day@aol.com].0day | 3.15 MB |
MD5:
a7a910bf1787f5b0c187828e377e58f1
SHA1: 9b1e7f6f0aa64cd41e350021b6cf0b2d4f464735 SHA256: ba537802dd8b19d4149546ec796991e5b78b6c534f7ece36eb66744beff07fac SSDeep: 49152:zDxL8QBonTex4S120ytJylnGL7I8jXkN6td:zR89K1dGL08jXkNk |
|
|
| C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[my0day@aol.com].0day | 14.88 MB |
MD5:
0132354deb06c352353675fce278a129
SHA1: 82f447263c0d4d83d398af15034413083edcbc35 SHA256: 8e5451128ff68d309300dd54c2a3bb83f196e6fefb39f1e8d6b7c24b8a6f7307 SSDeep: 196608:TIwm3nNVAl+ig71eZ8FclBElWHEbyLbyo9crpLlR8ioLO0ZF9CrpbQ:OL71eiFge/GHyo2rpLkcoCrpbQ |
|
|
| C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[my0day@aol.com].0day | 3.48 MB |
MD5:
807b45a46b0a6e5d7492b3036ec8960f
SHA1: 0cb7e1781b326d992f32dbc29e4006f6d2ae66b1 SHA256: cadcbcc7a686552455852218dd71c159957c7b030757d805e4db1ec06dfc125a SSDeep: 49152:fHYLL/WoWLljb1R6rOSN20yRJ68ID5sKRnzet0QPjPEE:fqLVW6vwg7noPjPEE |
|
|
| C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[my0day@aol.com].0day | 42.53 MB |
MD5:
4fb6c079967f604d4b8cdf477caf6de0
SHA1: a8777ca0e49e5d98d01a6b007c7b62b5dffb5b63 SHA256: 9fac05c1ffc4b8060b0a5b942d35cc90c0bff012af1a00a6712c6d03018b083f SSDeep: 196608:MaurJM4k8IMj3kMxfGbWaxJMKMA4JxuiNQG3A2r7rfiSFhysD8uxDxKj:EOn8IQkM2BFEx96G3AUf7FnzKj |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[my0day@aol.com].0day | 2.35 MB |
MD5:
2a2fb647df8c531f8db96cbb4f3795f6
SHA1: be645a9114d514bb0f3c1a436099592d88624d6d SHA256: 0fb1950d11fb75a3112e5f0a3959bf492e114e40f6486ce20bef6feb003a7244 SSDeep: 49152:R0opH/cgHa3HRxz+4gx3drpLDjRGMU4QqlKTos3kff9nTRiw:R0op1Har+ndtfRjQqlWoldTRiw |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[my0day@aol.com].0day | 11.70 MB |
MD5:
052b4a3aaf24e1879297e0f1408c7662
SHA1: ccf2d2087988828f8117c27f1ec3ccaf4b5b926d SHA256: 6c23fd16b44e1eefdf52ac7ad99a1fc46a9b4b3e77c6643dd26d1ad79a2d1021 SSDeep: 196608:Vf1gRyjQR9g8YYIcjfXontQdQGzFZaGkGdN7p06H1JX/WanfW/OIV0h:V1WbR9YY5AJGBZWGRz1kaza0h |
|
|
| C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[my0day@aol.com].0day | 3.16 MB |
MD5:
872efded1232db3f344dd3f2c384bce1
SHA1: a6174d7909cce22ca9c2005fffb8533cac764529 SHA256: dbe13dab1cd964e1373d176d00dbc9b998235d7ada45434f8d020dbe804496e4 SSDeep: 49152:zDxL8QBoSTex4S120ytJykteHtPWlectBtrUYGh4J8krcqrm:zR89r1cU5ctBTGQrc5 |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[my0day@aol.com].0day | 13.76 MB |
MD5:
42ac6eff5aa1dad153cb32ec3d616e43
SHA1: 8d8693b1d4aa27f2f48345e6f2e760c5f205d163 SHA256: b8984acb419b90aab0f7fd9addaa90b10847e75aeaabfde74fc133085adf3455 SSDeep: 196608:Yu6eDsIwHBL4B9lCzT2bOgcDuihGYrLpVUBJ/7HAFGtNy6aMhnRTU+:WqsIwHNB26gVE7e/7JNMM5RTU+ |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[my0day@aol.com].0day | 20.84 MB |
MD5:
3d0e1f18676626331ffefafe53b18248
SHA1: 80d370bf723a4b00b769c1a7266d63de82280ab0 SHA256: 9ceac29cec7a9772266c3c6ed68bc7f25dcb38c12c388fe9f21e58890e9cf26f SSDeep: 196608:PFNUxdiOm1j3/abCsYwFOSQo2pWDOQs4hW6s63HS:qPmN3/abtYIQoROQ93RS |
|
|
| C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[my0day@aol.com].0day | 18.75 MB |
MD5:
2971243e2713ad806deb4f4812c8b011
SHA1: 4670337bb67e4711366d8209a0c64b8e2ac7b34a SHA256: a911fcc37f6510cfe874971971b6aef60b55276e1c56b85b777056aa30f5db46 SSDeep: 98304:llyaDH9kcidg6C9NfjN0+inHftQADI0NCPKB/un7ylf6A:iaDH9F7/iHXDI2CPKBUq6A |
|
|
| C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[my0day@aol.com].0day | 3.54 MB |
MD5:
34aeb43e2eb38defbb5843ee65623581
SHA1: ab823778a4419b69d4ebb38182c1ce4ef7937954 SHA256: e7db19569345ae42e9eeffefc956f172800b9d0a99293949cd2ae556aecd9850 SSDeep: 98304:zDMUwxyODPFhbY12HLodiF4+5riQlsWNt8o0:z4UwVthio4wzv8o0 |
|
|
| C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[my0day@aol.com].0day | 3.73 MB |
MD5:
60bd5adf02a69fbe6bd58897838c17c7
SHA1: a9236c827b50e4697b36b9553054babe785a342b SHA256: 16a07feede470181dcb8cc9537238401bd003e515fb511081c3470b763215a3d SSDeep: 12288:3JxxQ+a+PvyWulmHGQkKPsiVzQ9gnDlo8o93/X226RT8:5xjP6Wu6kms39gDlo8o93v22oT8 |
|
|
Threads
Thread 0xa74
375
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Load | module_name = kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetProcAddress, address_out = 0x76c31222 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetModuleHandleW, address_out = 0x76c334b0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FindNextFileW, address_out = 0x76c354ee |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FindClose, address_out = 0x76c34442 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = MoveFileW, address_out = 0x76c49af0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetFileSizeEx, address_out = 0x76c359e2 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetModuleFileNameW, address_out = 0x76c34950 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetFileAttributesW, address_out = 0x76c31b18 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = ExitProcess, address_out = 0x76c37a10 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetCommandLineW, address_out = 0x76c35223 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetComputerNameW, address_out = 0x76c3dd0e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetComputerNameA, address_out = 0x76c4b6e0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateMutexW, address_out = 0x76c3424c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = lstrlenW, address_out = 0x76c31700 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = lstrlenA, address_out = 0x76c35a4b |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetCurrentProcess, address_out = 0x76c31809 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WaitForSingleObject, address_out = 0x76c31136 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetLogicalDrives, address_out = 0x76c35371 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetTickCount, address_out = 0x76c3110c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = DeleteFileW, address_out = 0x76c389b3 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WideCharToMultiByte, address_out = 0x76c3170d |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = InitializeCriticalSectionAndSpinCount, address_out = 0x76c31916 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Sleep, address_out = 0x76c310ff |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = LeaveCriticalSection, address_out = 0x77152270 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = ReadFile, address_out = 0x76c33ed3 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateFileW, address_out = 0x76c33f5c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = OpenMutexW, address_out = 0x76c35151 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = EnterCriticalSection, address_out = 0x771522b0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WaitForMultipleObjects, address_out = 0x76c34220 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = lstrcmpiW, address_out = 0x76c4d5cd |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = lstrcmpiA, address_out = 0x76c33e8e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = DeleteCriticalSection, address_out = 0x771645f5 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = ReleaseMutex, address_out = 0x76c3111e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CloseHandle, address_out = 0x76c31410 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetVersion, address_out = 0x76c34467 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateThread, address_out = 0x76c334d5 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = ExpandEnvironmentStringsW, address_out = 0x76c34173 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = QueryPerformanceCounter, address_out = 0x76c31725 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = QueryPerformanceFrequency, address_out = 0x76c341f0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetCurrentProcessId, address_out = 0x76c311f8 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetFileAttributesW, address_out = 0x76c4d4f7 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetVolumeInformationW, address_out = 0x76c4c860 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WriteFile, address_out = 0x76c31282 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetFilePointerEx, address_out = 0x76c4c807 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetEndOfFile, address_out = 0x76c4ce2e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FindFirstFileW, address_out = 0x76c34435 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetProcessHeap, address_out = 0x76c314e9 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = HeapReAlloc, address_out = 0x77171f6e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = HeapAlloc, address_out = 0x7715e026 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = HeapFree, address_out = 0x76c314c9 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreatePipe, address_out = 0x76cb415b |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetHandleInformation, address_out = 0x76c4195c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateProcessW, address_out = 0x76c3103d |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CompareStringW, address_out = 0x76c33bca |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CompareStringA, address_out = 0x76c33c5a |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = OpenProcess, address_out = 0x76c31986 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = TerminateProcess, address_out = 0x76c4d802 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetSystemTime, address_out = 0x76c35a96 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SystemTimeToFileTime, address_out = 0x76c35a7e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetLastError, address_out = 0x76c311c0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateToolhelp32Snapshot, address_out = 0x76c5735f |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Process32NextW, address_out = 0x76c5896c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Process32FirstW, address_out = 0x76c58baf |
|
1 | |
| Module | Load | module_name = advapi32.dll, base_address = 0x74d40000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = RegOpenKeyExW, address_out = 0x74d5468d |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = RegQueryValueExW, address_out = 0x74d546ad |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = RegSetValueExW, address_out = 0x74d514d6 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = RegCloseKey, address_out = 0x74d5469d |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = OpenProcessToken, address_out = 0x74d54304 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = GetTokenInformation, address_out = 0x74d5431c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = OpenSCManagerW, address_out = 0x74d4ca64 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = OpenServiceW, address_out = 0x74d4ca4c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = CloseServiceHandle, address_out = 0x74d5369c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = ControlService, address_out = 0x74d67144 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = QueryServiceStatus, address_out = 0x74d52a86 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = EnumDependentServicesW, address_out = 0x74d41e3a |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = EnumServicesStatusExW, address_out = 0x74d4b466 |
|
1 | |
| Module | Load | module_name = user32.dll, base_address = 0x74f40000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\user32.dll, function = SystemParametersInfoW, address_out = 0x74f590d3 |
|
1 | |
| Module | Load | module_name = Shell32.dll, base_address = 0x75fd0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\shell32.dll, function = ShellExecuteExW, address_out = 0x75ff1e46 |
|
1 | |
| Module | Load | module_name = ntdll.dll, base_address = 0x77130000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x7714fda0 |
|
1 | |
| Module | Load | module_name = mpr.dll, base_address = 0x74b50000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\mpr.dll, function = WNetCloseEnum, address_out = 0x74b52dd6 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\mpr.dll, function = WNetOpenEnumW, address_out = 0x74b52f06 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\mpr.dll, function = WNetEnumResourceW, address_out = 0x74b53058 |
|
1 | |
| Module | Load | module_name = ws2_32.dll, base_address = 0x75bc0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = WSAStartup, address_out = 0x75bc3ab2 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = socket, address_out = 0x75bc3eb8 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = send, address_out = 0x75bc6f01 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = recv, address_out = 0x75bc6b0e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = connect, address_out = 0x75bc6bdd |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = closesocket, address_out = 0x75bc3918 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = gethostbyname, address_out = 0x75bd7673 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = inet_addr, address_out = 0x75bc311b |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = ntohl, address_out = 0x75bc2d57 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = htonl, address_out = 0x75bc2d57 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = htons, address_out = 0x75bc2d8b |
|
1 | |
| System | Get Time | type = Performance Ctr, time = 15106276764 |
|
1 | |
| System | Get Time | type = Ticks, time = 98577 |
|
3 | |
| System | Get Info | type = Operating System |
|
1 | |
| Mutex | Open | mutex_name = Global\syncronize_WRZB2LA, desired_access = SYNCHRONIZE |
|
1 | |
| Mutex | Create | mutex_name = Global\syncronize_WRZB2LA |
|
1 | |
| Mutex | Open | mutex_name = Global\syncronize_WRZB2LU, desired_access = SYNCHRONIZE |
|
1 | |
| Mutex | Create | mutex_name = Global\syncronize_WRZB2LU |
|
1 | |
| System | Get Info | type = Operating System |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\agent1c.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\agent1c.exe, size = 32767 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| File | Create | filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\agent1c.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ |
|
1 | |
| File | Create | filename = C:\Windows\System32\agent1c.exe, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\agent1c.exe, size = 1048576, size_out = 94720 |
|
1 | |
| File | Write | filename = C:\Windows\System32\agent1c.exe, size = 94720 |
|
1 | |
| File | Read | filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\agent1c.exe, size = 1048576, size_out = 0 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| Registry | Open Key | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run |
|
1 | |
| Registry | Write Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run, value_name = agent1c.exe, data = C:\Windows\System32\agent1c.exe, size = 62, type = REG_SZ |
|
1 | |
| Registry | Open Key | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, value_name = Startup, data = 83, type = REG_NONE |
|
1 | |
| Registry | Open Key | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, value_name = Startup, data = %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup, type = REG_EXPAND_SZ |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| File | Create | filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\agent1c.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ |
|
1 | |
| File | Create | filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\agent1c.exe, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\agent1c.exe, size = 1048576, size_out = 94720 |
|
1 | |
| File | Write | filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\agent1c.exe, size = 94720 |
|
1 | |
| File | Read | filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\agent1c.exe, size = 1048576, size_out = 0 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| Registry | Open Key | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, value_name = Common Startup, data = %ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup, type = REG_EXPAND_SZ |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| File | Create | filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\agent1c.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ |
|
1 | |
| File | Create | filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\agent1c.exe, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\agent1c.exe, size = 1048576, size_out = 94720 |
|
1 | |
| File | Write | filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\agent1c.exe, size = 94720 |
|
1 | |
| File | Read | filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\agent1c.exe, size = 1048576, size_out = 0 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| File | Create Pipe | pipe_name = Anonymous read pipe, size = 0 |
|
1 | |
| File | Create Pipe | pipe_name = Anonymous read pipe, size = 0 |
|
1 | |
| Process | Create | process_name = C:\Windows\system32\cmd.exe, os_pid = 0xa84, startup_flags = STARTF_USESHOWWINDOW, STARTF_USESTDHANDLES, show_window = SW_HIDE |
|
1 | |
| File | Write | size = 65 |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\agent1c.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\agent1c.exe, size = 32767 |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\agent1c.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\agent1c.exe, size = 32767 |
|
1 | |
| System | Sleep | duration = -1 (infinite) |
|
1 |
Thread 0xa8c
3702
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
|
For performance reasons, the remaining 365 entries are omitted.
The remaining entries can be found in glog.xml. |
|||||
Thread 0xa94
14
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| System | Get Computer Name | result_out = XDUWTFONO |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
13 |
Thread 0xa98
95
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| System | Get Time | type = Ticks, time = 98904 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Get Time | type = Ticks, time = 99372 |
|
1 | |
| System | Get Time | type = Ticks, time = 99591 |
|
1 | |
| System | Get Time | type = Ticks, time = 99918 |
|
2 | |
| System | Get Time | type = Ticks, time = 100199 |
|
1 | |
| System | Get Time | type = Ticks, time = 100589 |
|
1 | |
| System | Get Time | type = Ticks, time = 100995 |
|
2 | |
| System | Get Time | type = Ticks, time = 101400 |
|
1 | |
| System | Get Time | type = Ticks, time = 101806 |
|
1 | |
| System | Get Time | type = Ticks, time = 102118 |
|
2 | |
| System | Get Time | type = Ticks, time = 102367 |
|
1 | |
| System | Get Time | type = Ticks, time = 102695 |
|
1 | |
| System | Get Time | type = Ticks, time = 103069 |
|
1 | |
| System | Get Time | type = Ticks, time = 103553 |
|
2 | |
| System | Get Time | type = Ticks, time = 104068 |
|
1 | |
| System | Get Time | type = Ticks, time = 104505 |
|
1 | |
| System | Get Time | type = Ticks, time = 104754 |
|
2 | |
| System | Get Time | type = Ticks, time = 105097 |
|
1 | |
| System | Get Time | type = Ticks, time = 105269 |
|
1 | |
| System | Get Time | type = Ticks, time = 105425 |
|
1 | |
| System | Get Time | type = Ticks, time = 105628 |
|
1 | |
| System | Get Time | type = Ticks, time = 106049 |
|
2 | |
| System | Get Time | type = Ticks, time = 106470 |
|
1 | |
| System | Get Time | type = Ticks, time = 106876 |
|
1 | |
| System | Get Time | type = Ticks, time = 107313 |
|
2 | |
| System | Get Time | type = Ticks, time = 107625 |
|
1 | |
| System | Get Time | type = Ticks, time = 107968 |
|
1 | |
| System | Get Time | type = Ticks, time = 108327 |
|
2 | |
| System | Get Time | type = Ticks, time = 108888 |
|
1 | |
| System | Get Time | type = Ticks, time = 109107 |
|
1 | |
| System | Get Time | type = Ticks, time = 109294 |
|
1 | |
| System | Get Time | type = Ticks, time = 109481 |
|
2 | |
| System | Get Time | type = Ticks, time = 109777 |
|
1 | |
| System | Get Time | type = Ticks, time = 110089 |
|
1 | |
| System | Get Time | type = Ticks, time = 110323 |
|
1 | |
| System | Get Time | type = Ticks, time = 110448 |
|
1 | |
| System | Get Time | type = Ticks, time = 111228 |
|
2 | |
| System | Get Time | type = Ticks, time = 111556 |
|
1 | |
| System | Get Time | type = Ticks, time = 111821 |
|
1 | |
| System | Get Time | type = Ticks, time = 112648 |
|
2 | |
| System | Get Time | type = Ticks, time = 112819 |
|
1 | |
| System | Get Time | type = Ticks, time = 113085 |
|
1 | |
| System | Get Time | type = Ticks, time = 113428 |
|
1 | |
| System | Get Time | type = Ticks, time = 113974 |
|
2 | |
| System | Get Time | type = Ticks, time = 114270 |
|
1 | |
| System | Get Time | type = Ticks, time = 115191 |
|
2 | |
| System | Get Time | type = Ticks, time = 115503 |
|
1 | |
| System | Get Time | type = Ticks, time = 115783 |
|
1 | |
| System | Get Time | type = Ticks, time = 116033 |
|
1 | |
| System | Get Time | type = Ticks, time = 116938 |
|
2 | |
| System | Get Time | type = Ticks, time = 117297 |
|
1 | |
| System | Get Time | type = Ticks, time = 117484 |
|
1 | |
| System | Get Time | type = Ticks, time = 117811 |
|
1 | |
| System | Get Time | type = Ticks, time = 117936 |
|
1 | |
| System | Get Time | type = Ticks, time = 118092 |
|
2 | |
| System | Get Time | type = Ticks, time = 118872 |
|
1 | |
| System | Get Time | type = Ticks, time = 118997 |
|
1 | |
| System | Get Time | type = Ticks, time = 119215 |
|
2 | |
| System | Get Time | type = Ticks, time = 119543 |
|
1 | |
| System | Get Time | type = Ticks, time = 120401 |
|
2 | |
| System | Get Time | type = Ticks, time = 120697 |
|
1 | |
| System | Get Time | type = Ticks, time = 121009 |
|
1 | |
| System | Get Time | type = Ticks, time = 121867 |
|
2 | |
| System | Get Time | type = Ticks, time = 122008 |
|
1 | |
| System | Get Time | type = Ticks, time = 122398 |
|
1 | |
| System | Get Time | type = Ticks, time = 122757 |
|
1 | |
| System | Get Time | type = Ticks, time = 122913 |
|
2 | |
| System | Get Time | type = Ticks, time = 123100 |
|
1 | |
| System | Get Time | type = Ticks, time = 123240 |
|
1 | |
| System | Get Time | type = Ticks, time = 123381 |
|
1 | |
| System | Get Time | type = Ticks, time = 123490 |
|
1 | |
| System | Get Time | type = Ticks, time = 123771 |
|
1 |
Thread 0xa9c
95
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| System | Get Time | type = Ticks, time = 99247 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Get Time | type = Ticks, time = 99372 |
|
1 | |
| System | Get Time | type = Ticks, time = 99591 |
|
1 | |
| System | Get Time | type = Ticks, time = 99949 |
|
1 | |
| System | Get Time | type = Ticks, time = 100230 |
|
1 | |
| System | Get Time | type = Ticks, time = 100589 |
|
2 | |
| System | Get Time | type = Ticks, time = 100995 |
|
1 | |
| System | Get Time | type = Ticks, time = 101400 |
|
1 | |
| System | Get Time | type = Ticks, time = 101806 |
|
2 | |
| System | Get Time | type = Ticks, time = 102118 |
|
1 | |
| System | Get Time | type = Ticks, time = 102367 |
|
1 | |
| System | Get Time | type = Ticks, time = 102695 |
|
1 | |
| System | Get Time | type = Ticks, time = 103069 |
|
2 | |
| System | Get Time | type = Ticks, time = 103553 |
|
1 | |
| System | Get Time | type = Ticks, time = 104068 |
|
1 | |
| System | Get Time | type = Ticks, time = 104505 |
|
2 | |
| System | Get Time | type = Ticks, time = 104754 |
|
1 | |
| System | Get Time | type = Ticks, time = 105097 |
|
1 | |
| System | Get Time | type = Ticks, time = 105269 |
|
1 | |
| System | Get Time | type = Ticks, time = 105425 |
|
1 | |
| System | Get Time | type = Ticks, time = 105628 |
|
2 | |
| System | Get Time | type = Ticks, time = 106049 |
|
1 | |
| System | Get Time | type = Ticks, time = 106470 |
|
1 | |
| System | Get Time | type = Ticks, time = 106876 |
|
2 | |
| System | Get Time | type = Ticks, time = 107313 |
|
1 | |
| System | Get Time | type = Ticks, time = 107625 |
|
1 | |
| System | Get Time | type = Ticks, time = 107968 |
|
2 | |
| System | Get Time | type = Ticks, time = 108327 |
|
1 | |
| System | Get Time | type = Ticks, time = 108888 |
|
1 | |
| System | Get Time | type = Ticks, time = 109107 |
|
2 | |
| System | Get Time | type = Ticks, time = 109278 |
|
1 | |
| System | Get Time | type = Ticks, time = 109481 |
|
1 | |
| System | Get Time | type = Ticks, time = 109731 |
|
1 | |
| System | Get Time | type = Ticks, time = 110058 |
|
1 | |
| System | Get Time | type = Ticks, time = 110323 |
|
2 | |
| System | Get Time | type = Ticks, time = 110448 |
|
1 | |
| System | Get Time | type = Ticks, time = 111228 |
|
1 | |
| System | Get Time | type = Ticks, time = 111556 |
|
2 | |
| System | Get Time | type = Ticks, time = 111821 |
|
1 | |
| System | Get Time | type = Ticks, time = 112648 |
|
2 | |
| System | Get Time | type = Ticks, time = 112819 |
|
1 | |
| System | Get Time | type = Ticks, time = 113085 |
|
1 | |
| System | Get Time | type = Ticks, time = 113428 |
|
1 | |
| System | Get Time | type = Ticks, time = 114005 |
|
2 | |
| System | Get Time | type = Ticks, time = 114270 |
|
1 | |
| System | Get Time | type = Ticks, time = 115191 |
|
2 | |
| System | Get Time | type = Ticks, time = 115503 |
|
1 | |
| System | Get Time | type = Ticks, time = 115783 |
|
1 | |
| System | Get Time | type = Ticks, time = 116033 |
|
1 | |
| System | Get Time | type = Ticks, time = 116938 |
|
2 | |
| System | Get Time | type = Ticks, time = 117297 |
|
1 | |
| System | Get Time | type = Ticks, time = 117484 |
|
1 | |
| System | Get Time | type = Ticks, time = 117811 |
|
1 | |
| System | Get Time | type = Ticks, time = 117936 |
|
1 | |
| System | Get Time | type = Ticks, time = 118092 |
|
2 | |
| System | Get Time | type = Ticks, time = 118872 |
|
1 | |
| System | Get Time | type = Ticks, time = 118997 |
|
1 | |
| System | Get Time | type = Ticks, time = 119215 |
|
2 | |
| System | Get Time | type = Ticks, time = 119543 |
|
1 | |
| System | Get Time | type = Ticks, time = 120401 |
|
2 | |
| System | Get Time | type = Ticks, time = 120697 |
|
1 | |
| System | Get Time | type = Ticks, time = 121009 |
|
1 | |
| System | Get Time | type = Ticks, time = 121867 |
|
2 | |
| System | Get Time | type = Ticks, time = 122008 |
|
1 | |
| System | Get Time | type = Ticks, time = 122398 |
|
1 | |
| System | Get Time | type = Ticks, time = 122803 |
|
1 | |
| System | Get Time | type = Ticks, time = 122975 |
|
2 | |
| System | Get Time | type = Ticks, time = 123115 |
|
1 | |
| System | Get Time | type = Ticks, time = 123318 |
|
1 | |
| System | Get Time | type = Ticks, time = 123443 |
|
1 | |
| System | Get Time | type = Ticks, time = 123552 |
|
1 | |
| System | Get Time | type = Ticks, time = 123771 |
|
1 |
Thread 0xaa0
4016
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
2 | |
| File | Create | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, type = size, size_out = 129 |
|
1 | |
| File | Get Info | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, size = 1048560, size_out = 129 |
|
1 | |
| File | Write | filename = C:\Boot\Fonts\kor_boot.ttf, size = 144 |
|
1 | |
| File | Read | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Boot\Fonts\kor_boot.ttf, size = 234 |
|
1 | |
| File | Delete | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini |
|
1 | |
| File | Create | filename = C:\BOOTSECT.BAK, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\BOOTSECT.BAK, type = size, size_out = 8192 |
|
1 | |
| File | Get Info | filename = C:\BOOTSECT.BAK, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\BOOTSECT.BAK.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\BOOTSECT.BAK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\BOOTSECT.BAK.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\BOOTSECT.BAK, size = 1048560, size_out = 8192 |
|
1 | |
| File | Write | filename = C:\BOOTSECT.BAK.id-9C354B42.[my0day@aol.com].0day, size = 8208 |
|
1 | |
| File | Read | filename = C:\BOOTSECT.BAK, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\BOOTSECT.BAK.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\BOOTSECT.BAK |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab, type = size, size_out = 1450 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml, size = 1048560, size_out = 1450 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 1456 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 244 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml, type = size, size_out = 3186 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml, size = 1048560, size_out = 3186 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 3200 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 240 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 4207 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 4207 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 4208 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 2424 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 2424 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 2432 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml, type = size, size_out = 1800 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml, size = 1048560, size_out = 1800 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 1808 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 1852 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 1852 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 1856 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml, type = size, size_out = 5557 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml, size = 1048560, size_out = 5557 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 5568 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 238 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml, type = size, size_out = 819 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml, size = 1048560, size_out = 819 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id-9C354B42.[my0day@aol.com].0day, size = 832 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id-9C354B42.[my0day@aol.com].0day, size = 244 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm, type = size, size_out = 27195 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm, size = 1048560, size_out = 27195 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id-9C354B42.[my0day@aol.com].0day, size = 27200 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id-9C354B42.[my0day@aol.com].0day, size = 232 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm, type = size, size_out = 67190 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm, size = 1048560, size_out = 67190 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id-9C354B42.[my0day@aol.com].0day, size = 67200 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml, type = size, size_out = 596341 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml, size = 1048560, size_out = 596341 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id-9C354B42.[my0day@aol.com].0day, size = 596352 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS, type = size, size_out = 1069 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF, size = 1048560, size_out = 1069 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1072 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.id-9C354B42.[my0day@aol.com].0day, size = 224 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG, type = size, size_out = 1682 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG, size = 1048560, size_out = 1682 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[my0day@aol.com].0day, size = 1696 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[my0day@aol.com].0day, size = 224 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, type = size, size_out = 791686 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, type = size, size_out = 27045 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, type = size, size_out = 89600 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, type = size, size_out = 31744 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, type = size, size_out = 33280 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, type = size, size_out = 62976 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | size = 1048560, size_out = 1565 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 1568 |
|
1 | |
| File | Read | size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML, type = size, size_out = 2296 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML, size = 1048560, size_out = 2296 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 2304 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML, type = size, size_out = 1231 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML, size = 1048560, size_out = 1231 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 1232 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 242 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML, type = size, size_out = 1852 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML, size = 1048560, size_out = 1852 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 1856 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM, type = size, size_out = 71236 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM, size = 1048560, size_out = 71236 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM.id-9C354B42.[my0day@aol.com].0day, size = 71248 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM.id-9C354B42.[my0day@aol.com].0day, size = 226 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML, type = size, size_out = 819 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML, size = 1048560, size_out = 819 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.id-9C354B42.[my0day@aol.com].0day, size = 832 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.id-9C354B42.[my0day@aol.com].0day, size = 244 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, type = size, size_out = 37689 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, size = 1048560, size_out = 37689 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM.id-9C354B42.[my0day@aol.com].0day, size = 37696 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM, type = size, size_out = 26929 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM, size = 1048560, size_out = 26929 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.id-9C354B42.[my0day@aol.com].0day, size = 26944 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.id-9C354B42.[my0day@aol.com].0day, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, type = size, size_out = 27195 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, size = 1048560, size_out = 27195 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.id-9C354B42.[my0day@aol.com].0day, size = 27200 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.id-9C354B42.[my0day@aol.com].0day, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, type = size, size_out = 1383 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, size = 1048560, size_out = 1383 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 1392 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 242 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML, type = size, size_out = 3186 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML, size = 1048560, size_out = 3186 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 3200 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 240 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML, type = size, size_out = 4207 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML, size = 1048560, size_out = 4207 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 4208 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML, type = size, size_out = 1450 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML, size = 1048560, size_out = 1450 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 1456 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 246 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML, type = size, size_out = 1886 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML, size = 1048560, size_out = 1886 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 1888 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, type = size, size_out = 1608 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML, size = 1048560, size_out = 1608 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 1616 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg, type = size, size_out = 116724 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 19780 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG, size = 1048560, size_out = 19780 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 19792 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF, type = size, size_out = 1363 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF, size = 1048560, size_out = 1363 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1376 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG, type = size, size_out = 20371 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG, size = 1048560, size_out = 20371 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 20384 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF, type = size, size_out = 1293 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF, size = 1048560, size_out = 1293 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1296 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, type = size, size_out = 20575 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, size = 1048560, size_out = 20575 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 20576 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF, type = size, size_out = 1453 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF, size = 1048560, size_out = 1453 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1456 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF, type = size, size_out = 1347 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 1347 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1360 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, type = size, size_out = 33559 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, size = 1048560, size_out = 33559 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 33568 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF, type = size, size_out = 2476 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF, size = 1048560, size_out = 2476 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 2480 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG, type = size, size_out = 19485 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG, size = 1048560, size_out = 19485 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 19488 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF, type = size, size_out = 1232 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF, size = 1048560, size_out = 1232 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1248 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF, type = size, size_out = 2574 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF, size = 1048560, size_out = 2574 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 2576 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG, type = size, size_out = 37440 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG, size = 1048560, size_out = 37440 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, size = 37456 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF, type = size, size_out = 1593 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF, size = 1048560, size_out = 1593 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1600 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 21745 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG, size = 1048560, size_out = 21745 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 21760 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF, type = size, size_out = 2604 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF, size = 1048560, size_out = 2604 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 2608 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG, type = size, size_out = 31975 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG, size = 1048560, size_out = 31975 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 31984 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF, type = size, size_out = 4100 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF, size = 1048560, size_out = 4100 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 4112 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG, type = size, size_out = 47962 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG, size = 1048560, size_out = 47962 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 47968 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG, type = size, size_out = 34163 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG, size = 1048560, size_out = 34163 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 34176 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF, type = size, size_out = 2527 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF, size = 1048560, size_out = 2527 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 2528 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF, type = size, size_out = 1737 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF, size = 1048560, size_out = 1737 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1744 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG, type = size, size_out = 33479 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG, size = 1048560, size_out = 33479 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 33488 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF, type = size, size_out = 1675 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF, size = 1048560, size_out = 1675 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1680 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 72031 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM.id-9C354B42.[my0day@aol.com].0day, size = 72032 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl, size = 1048560, size_out = 9024 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 9040 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl, type = size, size_out = 3251 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF, size = 1048560, size_out = 3251 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 3264 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF, type = size, size_out = 8097 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF, size = 1048560, size_out = 8097 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 8112 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF, type = size, size_out = 7686 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF, size = 1048560, size_out = 7686 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 7696 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF, type = size, size_out = 11891 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, size = 1048560, size_out = 11891 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 11904 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, type = size, size_out = 517 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, size = 1048560, size_out = 517 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 528 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, type = size, size_out = 502 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, size = 1048560, size_out = 502 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 512 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, type = size, size_out = 12702 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, size = 1048560, size_out = 12702 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 12704 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, type = size, size_out = 3484 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, size = 1048560, size_out = 3484 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 3488 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, type = size, size_out = 3140 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, size = 1048560, size_out = 3140 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 3152 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, type = size, size_out = 12482 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF, size = 1048560, size_out = 12482 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 12496 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF, type = size, size_out = 5253 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF, size = 1048560, size_out = 5253 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 5264 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, size = 1048560, size_out = 4894 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 4896 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, type = size, size_out = 3120 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF, size = 1048560, size_out = 3120 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 3136 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, size = 1048560, size_out = 3026 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3040 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, type = size, size_out = 20578 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, size = 1048560, size_out = 20578 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 20592 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, size = 1048560, size_out = 10832 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 10848 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, size = 1048560, size_out = 14428 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 14432 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, size = 1048560, size_out = 7072 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 7088 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, size = 1048560, size_out = 6636 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 6640 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 7668 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 7680 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 5004 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 5008 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 4870 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, size = 1048560, size_out = 4870 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 4880 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, size = 1048560, size_out = 26886 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 26896 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, size = 1048560, size_out = 28948 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 28960 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 4066 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 4080 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 24320 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 24336 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 24778 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 24784 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 47996 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 48000 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 40206 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 40208 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 47786 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 47792 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 14540 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 14544 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, size = 1048560, size_out = 11058 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 11072 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, size = 1048560, size_out = 1012 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1024 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, size = 1048560 |
|
1 |
Thread 0xaac
4067
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
2 | |
| File | Create | filename = C:\Boot\BCD.LOG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\BOOTSTAT.DAT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\BOOTSTAT.DAT, type = size, size_out = 65536 |
|
1 | |
| File | Get Info | filename = C:\Boot\BOOTSTAT.DAT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\BOOTSTAT.DAT.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\BOOTSTAT.DAT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\BOOTSTAT.DAT.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Boot\BOOTSTAT.DAT, size = 1048560, size_out = 65536 |
|
1 | |
| File | Write | filename = C:\Boot\Fonts\jpn_boot.ttf, size = 65552 |
|
1 | |
| File | Read | filename = C:\Boot\BOOTSTAT.DAT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Boot\Fonts\jpn_boot.ttf, size = 236 |
|
1 | |
| File | Delete | filename = C:\Boot\BOOTSTAT.DAT |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 1608 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 1608 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 1616 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml, type = size, size_out = 1347 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml, size = 1048560, size_out = 1347 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id-9C354B42.[my0day@aol.com].0day, size = 1360 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml, type = size, size_out = 1457 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml, size = 1048560, size_out = 1457 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id-9C354B42.[my0day@aol.com].0day, size = 1472 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml, type = size, size_out = 1458 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml, size = 1048560, size_out = 1458 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id-9C354B42.[my0day@aol.com].0day, size = 1472 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, type = size, size_out = 811 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, size = 1048560, size_out = 811 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id-9C354B42.[my0day@aol.com].0day, size = 816 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 6241 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 6241 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab, size = 6256 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml, type = size, size_out = 819 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml, size = 1048560, size_out = 819 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id-9C354B42.[my0day@aol.com].0day, size = 832 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id-9C354B42.[my0day@aol.com].0day, size = 244 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml, type = size, size_out = 4274 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml, size = 1048560, size_out = 4274 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[my0day@aol.com].0day, size = 4288 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[my0day@aol.com].0day, size = 240 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml, type = size, size_out = 4274 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml, size = 1048560, size_out = 4274 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[my0day@aol.com].0day, size = 4288 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[my0day@aol.com].0day, size = 240 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml, type = size, size_out = 6421 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml, size = 1048560, size_out = 6421 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id-9C354B42.[my0day@aol.com].0day, size = 6432 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id-9C354B42.[my0day@aol.com].0day, size = 238 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 16683 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 16683 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 16688 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml, type = size, size_out = 4274 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml, size = 1048560, size_out = 4274 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[my0day@aol.com].0day, size = 4288 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[my0day@aol.com].0day, size = 240 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 20577 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 20577 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 20592 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml, type = size, size_out = 8723 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml, size = 1048560, size_out = 8723 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id-9C354B42.[my0day@aol.com].0day, size = 8736 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF, type = size, size_out = 15067 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS, size = 1048560, size_out = 15067 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id-9C354B42.[my0day@aol.com].0day, size = 15072 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id-9C354B42.[my0day@aol.com].0day, size = 224 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, type = size, size_out = 1061 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, size = 1048560, size_out = 1061 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[my0day@aol.com].0day, size = 1072 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[my0day@aol.com].0day, size = 224 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml, type = size, size_out = 2626 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml, type = size, size_out = 2246 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml, type = size, size_out = 2240 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml, type = size, size_out = 2644 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml, type = size, size_out = 2542 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml, type = size, size_out = 2568 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[my0day@aol.com].0day, size = 786688 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML, type = size, size_out = 596341 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML, size = 1048560, size_out = 596341 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.id-9C354B42.[my0day@aol.com].0day, size = 596352 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML, type = size, size_out = 5557 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML, size = 1048560, size_out = 5557 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 5568 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 238 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML, type = size, size_out = 4274 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML, size = 1048560, size_out = 4274 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 4288 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 240 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML, type = size, size_out = 1606 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML, size = 1048560, size_out = 1606 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, size = 1616 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, size = 240 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML, type = size, size_out = 6421 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML, size = 1048560, size_out = 6421 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[my0day@aol.com].0day, size = 6432 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[my0day@aol.com].0day, size = 238 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, type = size, size_out = 16683 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, size = 1048560, size_out = 16683 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 16688 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML, type = size, size_out = 1452 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML, size = 1048560, size_out = 1452 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 1456 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 240 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML, type = size, size_out = 1872 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML, size = 1048560, size_out = 1872 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 1888 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML, type = size, size_out = 6241 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML, size = 1048560, size_out = 6241 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 6256 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, type = size, size_out = 20577 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, size = 1048560, size_out = 20577 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 20592 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML, type = size, size_out = 8723 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML, size = 1048560, size_out = 8723 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML.id-9C354B42.[my0day@aol.com].0day, size = 8736 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 2424 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML, size = 1048560, size_out = 2424 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 2432 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM, type = size, size_out = 11463 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM, size = 1048560, size_out = 11463 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM.id-9C354B42.[my0day@aol.com].0day, size = 11472 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML, type = size, size_out = 8918 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML, size = 1048560, size_out = 8918 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML.id-9C354B42.[my0day@aol.com].0day, size = 8928 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML, type = size, size_out = 1844 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML, size = 1048560, size_out = 1844 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML.id-9C354B42.[my0day@aol.com].0day, size = 1856 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 39017 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT, size = 1048560, size_out = 39017 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT.id-9C354B42.[my0day@aol.com].0day, size = 39024 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT.id-9C354B42.[my0day@aol.com].0day, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML, type = size, size_out = 2687 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML, size = 1048560, size_out = 2687 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML.id-9C354B42.[my0day@aol.com].0day, size = 2688 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML.id-9C354B42.[my0day@aol.com].0day, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML, type = size, size_out = 8564 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML, size = 1048560, size_out = 8564 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML.id-9C354B42.[my0day@aol.com].0day, size = 8576 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML.id-9C354B42.[my0day@aol.com].0day, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, type = size, size_out = 227311 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, size = 1048560, size_out = 227311 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.id-9C354B42.[my0day@aol.com].0day, size = 227312 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.id-9C354B42.[my0day@aol.com].0day, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML, type = size, size_out = 1183416 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT.id-9C354B42.[my0day@aol.com].0day, size = 1048560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, size = 1048560, size_out = 134856 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT.id-9C354B42.[my0day@aol.com].0day, size = 134864 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm, type = size, size_out = 237 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg, type = size, size_out = 6406 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf, type = size, size_out = 2920 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf, type = size, size_out = 7498 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm, type = size, size_out = 235 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg, type = size, size_out = 4222 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 2848 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi.id-9C354B42.[my0day@aol.com].0day, size = 2864 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, type = size, size_out = 27407 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, size = 1048560, size_out = 27407 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 27408 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF, type = size, size_out = 945 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF, size = 1048560, size_out = 945 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST.id-9C354B42.[my0day@aol.com].0day, size = 960 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG, type = size, size_out = 32607 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG, size = 1048560, size_out = 32607 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 32608 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF, type = size, size_out = 2044 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, size = 1048560, size_out = 2044 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[my0day@aol.com].0day, size = 2048 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 28595 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG, size = 1048560, size_out = 28595 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, size = 28608 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 26402 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG, size = 1048560, size_out = 26402 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 26416 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF, type = size, size_out = 5120 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF, size = 1048560, size_out = 5120 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 5136 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, type = size, size_out = 60724 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG, size = 1048560, size_out = 60724 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 60736 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF, type = size, size_out = 1659 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF, size = 1048560, size_out = 1659 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1664 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG, type = size, size_out = 44850 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG, size = 1048560, size_out = 44850 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 44864 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF, type = size, size_out = 1379 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF, size = 1048560, size_out = 1379 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1392 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF, type = size, size_out = 48115 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG, size = 1048560, size_out = 48115 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 48128 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 11573 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG, size = 1048560, size_out = 11573 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 11584 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi, type = size, size_out = 53115 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG, size = 1048560, size_out = 53115 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 53120 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 19525 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG, size = 1048560, size_out = 19525 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 19536 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG, size = 1048560, size_out = 4991 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 4992 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG, type = size, size_out = 44302 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, size = 1048560, size_out = 44302 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 44304 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, size = 1048560, size_out = 2668 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 2672 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, size = 1048560, size_out = 334427 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM.id-9C354B42.[my0day@aol.com].0day, size = 334432 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM.id-9C354B42.[my0day@aol.com].0day, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, type = size, size_out = 109718 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM, size = 1048560, size_out = 109718 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM.id-9C354B42.[my0day@aol.com].0day, size = 109728 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 716 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config.id-9C354B42.[my0day@aol.com].0day, size = 720 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config.id-9C354B42.[my0day@aol.com].0day, size = 252 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 169637 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG.id-9C354B42.[my0day@aol.com].0day, size = 169648 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG |
|
1 | |
| File | Create | filename = C:\Program Files\desktop.ini.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | size = 1048560, size_out = 174 |
|
1 | |
| File | Write | filename = C:\Program Files\desktop.ini.id-9C354B42.[my0day@aol.com].0day, size = 176 |
|
1 | |
| File | Read | size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\desktop.ini.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\desktop.ini |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png, type = size, size_out = 6431 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\blackbars80.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\blackbars80.png.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\blackbars80.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground_PAL.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground_PAL.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground_PAL.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground_PAL.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 29790 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl, size = 1048560, size_out = 29790 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl.id-9C354B42.[my0day@aol.com].0day, size = 29792 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl.id-9C354B42.[my0day@aol.com].0day, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl, size = 1048560, size_out = 6684 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 6688 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl, type = size, size_out = 2596 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF, size = 1048560, size_out = 2596 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 2608 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF, type = size, size_out = 10607 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF, size = 1048560, size_out = 10607 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 10608 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF, type = size, size_out = 15308 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF, size = 1048560, size_out = 15308 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 15312 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF, type = size, size_out = 5315 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF, size = 1048560, size_out = 5315 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 5328 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, size = 1048560, size_out = 8582 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 8592 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, type = size, size_out = 5375 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, size = 1048560, size_out = 5375 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 5376 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, size = 1048560, size_out = 9248 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 9264 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, size = 1048560, size_out = 5016 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 5024 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, size = 1048560, size_out = 4390 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 4400 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, size = 1048560, size_out = 3966 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 3968 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, size = 1048560, size_out = 3378 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 3392 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui, size = 1048560, size_out = 26332 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 26336 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui, size = 1048560, size_out = 16180 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 16192 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui, size = 1048560, size_out = 17236 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 17248 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui, size = 1048560, size_out = 16112 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 16128 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui, size = 1048560, size_out = 16676 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 16688 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui, size = 1048560 |
|
1 |
Thread 0xab0
3732
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, type = size, size_out = 1565 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, size = 1048560, size_out = 1565 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 1568 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 2296 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 2296 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 2304 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml, type = size, size_out = 1450 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml, size = 1048560, size_out = 1450 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 1456 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 246 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 1886 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 1886 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1888 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml, type = size, size_out = 9503 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml, size = 1048560, size_out = 9503 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 9504 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml, type = size, size_out = 913 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml, size = 1048560, size_out = 913 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 928 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 238 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 1452 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 1452 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 1456 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml, type = size, size_out = 596341 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml, size = 1048560, size_out = 596341 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id-9C354B42.[my0day@aol.com].0day, size = 596352 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml, type = size, size_out = 1349 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml, size = 1048560, size_out = 1349 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 1360 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 238 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 31094 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 31094 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, size = 31104 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 3024 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML, type = size, size_out = 1349 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML, size = 1048560, size_out = 1349 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 1360 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 238 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML, type = size, size_out = 819 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML, size = 1048560, size_out = 819 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.id-9C354B42.[my0day@aol.com].0day, size = 832 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.id-9C354B42.[my0day@aol.com].0day, size = 244 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML, type = size, size_out = 2624 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML, size = 1048560, size_out = 2624 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 2640 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML, type = size, size_out = 913 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML, size = 1048560, size_out = 913 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 928 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 238 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, type = size, size_out = 67190 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, size = 1048560, size_out = 67190 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[my0day@aol.com].0day, size = 67200 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, type = size, size_out = 1988 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, size = 1048560, size_out = 1988 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 2000 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML, type = size, size_out = 1457 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML, size = 1048560, size_out = 1457 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML.id-9C354B42.[my0day@aol.com].0day, size = 1472 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML, type = size, size_out = 5884 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML, size = 1048560, size_out = 5884 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 5888 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML, type = size, size_out = 1450 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, size = 1048560, size_out = 1450 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.id-9C354B42.[my0day@aol.com].0day, size = 1456 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.id-9C354B42.[my0day@aol.com].0day, size = 244 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg, type = size, size_out = 10340 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg, type = size, size_out = 5115 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg, type = size, size_out = 3981 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg, type = size, size_out = 5115 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg, type = size, size_out = 14049 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm, type = size, size_out = 233 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm, size = 1048560, size_out = 1569 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1584 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, type = size, size_out = 25234 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, size = 1048560, size_out = 25234 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 25248 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF, type = size, size_out = 2985 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF, size = 1048560, size_out = 2985 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 2992 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF, type = size, size_out = 1287 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF, size = 1048560, size_out = 1287 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1296 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, type = size, size_out = 1347 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF, size = 1048560, size_out = 1347 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1360 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF, type = size, size_out = 2552 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF, size = 1048560, size_out = 2552 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 2560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG, type = size, size_out = 18817 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG, size = 1048560, size_out = 18817 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 18832 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, type = size, size_out = 5179 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, size = 1048560, size_out = 5179 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 5184 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF, type = size, size_out = 1364 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF, size = 1048560, size_out = 1364 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1376 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, type = size, size_out = 1666 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, size = 1048560, size_out = 1666 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1680 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG, type = size, size_out = 19563 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG, size = 1048560, size_out = 19563 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 19568 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF, type = size, size_out = 1423 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF, size = 1048560, size_out = 1423 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1424 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG, type = size, size_out = 15737 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG, size = 1048560, size_out = 15737 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 15744 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF, type = size, size_out = 3970 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF, size = 1048560, size_out = 3970 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 3984 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF, type = size, size_out = 937 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF, size = 1048560, size_out = 937 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 944 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG, type = size, size_out = 29305 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG, size = 1048560, size_out = 29305 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 29312 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF, type = size, size_out = 1009 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF, size = 1048560, size_out = 1009 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1024 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, type = size, size_out = 27177 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, size = 1048560, size_out = 27177 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 27184 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF, type = size, size_out = 2209 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF, size = 1048560, size_out = 2209 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 2224 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG, type = size, size_out = 18380 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG, size = 1048560, size_out = 18380 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 18384 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM, type = size, size_out = 58026 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM, size = 1048560, size_out = 58026 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM.id-9C354B42.[my0day@aol.com].0day, size = 58032 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM, type = size, size_out = 123956 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM, size = 1048560, size_out = 123956 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM.id-9C354B42.[my0day@aol.com].0day, size = 123968 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM, type = size, size_out = 416918 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM, size = 1048560, size_out = 416918 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM.id-9C354B42.[my0day@aol.com].0day, size = 416928 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png, type = size, size_out = 1551 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_RGB_PAL.wmv, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_RGB_PAL.wmv, type = size, size_out = 237208 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_RGB_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_RGB_PAL.wmv.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_RGB_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\highlight.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\highlight.png, type = size, size_out = 1545 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\highlight.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\highlight.png.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\highlight.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png, type = size, size_out = 9115 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\notes-static.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\notes-static.png, type = size, size_out = 1369 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\notes-static.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\notes-static.png.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\notes-static.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png, type = size, size_out = 1285 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, size = 1048560, size_out = 7216 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 7232 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF, type = size, size_out = 4955 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF, size = 1048560, size_out = 4955 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 4960 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF, type = size, size_out = 5030 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF, size = 1048560, size_out = 5030 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 5040 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF, type = size, size_out = 1146 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF, size = 1048560, size_out = 1146 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1152 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF, type = size, size_out = 7583 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF, size = 1048560, size_out = 7583 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 7584 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF, type = size, size_out = 6984 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, size = 1048560, size_out = 6984 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 6992 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, type = size, size_out = 4734 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, size = 1048560, size_out = 4734 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 4736 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, type = size, size_out = 5684 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 5684 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 5696 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 27858 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 27872 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 3746 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3760 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 5836 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 5840 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 3012 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3024 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 2756 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2768 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 7372 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 7376 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 4612 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 4624 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 3144 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3152 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 8492 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 8496 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 7804 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 7808 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 7804 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 7808 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 2016 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2032 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 2492 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2496 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 3348 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3360 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 4296 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 4304 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 3228 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3232 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 4808 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 4816 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 4996 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 5008 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 4924 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 4928 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 20554 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 20560 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 13515 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 13520 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 20454 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 20464 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 15733 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 15744 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 12982 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 12992 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 9710 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 9712 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, size = 1048560, size_out = 12520 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 12528 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, size = 1048560 |
|
1 |
Thread 0xab4
3873
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
4 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 5884 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 5884 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 5888 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml, type = size, size_out = 1383 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml, size = 1048560, size_out = 1383 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 1392 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 242 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 2362 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 2362 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 2368 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml, type = size, size_out = 1231 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml, size = 1048560, size_out = 1231 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 1232 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 242 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml, type = size, size_out = 1606 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml, size = 1048560, size_out = 1606 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 1616 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 240 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 1988 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 1988 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 2000 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml, type = size, size_out = 1452 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml, size = 1048560, size_out = 1452 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 1456 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id-9C354B42.[my0day@aol.com].0day, size = 240 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 1872 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 1872 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 1888 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 9352 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 9352 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 9360 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 2624 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 2624 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 2640 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml, type = size, size_out = 16852 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml, size = 1048560, size_out = 16852 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id-9C354B42.[my0day@aol.com].0day, size = 16864 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id-9C354B42.[my0day@aol.com].0day, size = 240 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 222208 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM, type = size, size_out = 1941 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM, size = 1048560, size_out = 1941 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id-9C354B42.[my0day@aol.com].0day, size = 1952 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id-9C354B42.[my0day@aol.com].0day, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML, type = size, size_out = 1452 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML, size = 1048560, size_out = 1452 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 1456 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 9352 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML, size = 1048560, size_out = 9352 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, size = 9360 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML, type = size, size_out = 2362 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML, size = 1048560, size_out = 2362 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 2368 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML, type = size, size_out = 1347 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML, size = 1048560, size_out = 1347 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML.id-9C354B42.[my0day@aol.com].0day, size = 1360 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML, type = size, size_out = 1458 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML, size = 1048560, size_out = 1458 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML.id-9C354B42.[my0day@aol.com].0day, size = 1472 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, type = size, size_out = 811 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, size = 1048560, size_out = 811 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.id-9C354B42.[my0day@aol.com].0day, size = 816 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML, type = size, size_out = 16852 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML, size = 1048560, size_out = 16852 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML.id-9C354B42.[my0day@aol.com].0day, size = 16864 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML.id-9C354B42.[my0day@aol.com].0day, size = 240 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML, type = size, size_out = 31094 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML, size = 1048560, size_out = 31094 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 31104 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML, type = size, size_out = 9503 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML, size = 1048560, size_out = 9503 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 9504 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML, type = size, size_out = 1800 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML, size = 1048560, size_out = 1800 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, size = 1808 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm, type = size, size_out = 255 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg, type = size, size_out = 1074 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg, type = size, size_out = 2575 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif, type = size, size_out = 4587 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif, type = size, size_out = 2319 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini, type = size, size_out = 645 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini, size = 1048560, size_out = 645 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.id-9C354B42.[my0day@aol.com].0day, size = 656 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf, type = size, size_out = 3792 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm, type = size, size_out = 231 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg, type = size, size_out = 23871 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg, type = size, size_out = 5524 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm, type = size, size_out = 237 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg, type = size, size_out = 6381 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 34916 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG, size = 1048560, size_out = 34916 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 34928 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF, type = size, size_out = 2181 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF, size = 1048560, size_out = 2181 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 2192 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG, type = size, size_out = 20627 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG, size = 1048560, size_out = 20627 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 20640 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF, type = size, size_out = 1560 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF, size = 1048560, size_out = 1560 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1568 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG, type = size, size_out = 33009 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG, size = 1048560, size_out = 33009 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 33024 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF, type = size, size_out = 1925 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF, size = 1048560, size_out = 1925 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, size = 1936 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF, type = size, size_out = 3479 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF, size = 1048560, size_out = 3479 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 3488 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG, type = size, size_out = 31837 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG, size = 1048560, size_out = 31837 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 31840 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF, type = size, size_out = 2722 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF, size = 1048560, size_out = 2722 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 2736 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG, type = size, size_out = 43276 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG, size = 1048560, size_out = 43276 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 43280 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, type = size, size_out = 29925 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, size = 1048560, size_out = 29925 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 29936 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF, type = size, size_out = 3957 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF, size = 1048560, size_out = 3957 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 3968 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG, type = size, size_out = 33277 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG, size = 1048560, size_out = 33277 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 33280 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG, type = size, size_out = 25106 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG, size = 1048560, size_out = 25106 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 25120 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, type = size, size_out = 32403 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, size = 1048560, size_out = 32403 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 32416 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF, type = size, size_out = 1354 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF, size = 1048560, size_out = 1354 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1360 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, type = size, size_out = 32433 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, size = 1048560, size_out = 32433 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 32448 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 18413 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, size = 1048560, size_out = 18413 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 18416 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF, type = size, size_out = 1339 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF, size = 1048560, size_out = 1339 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1344 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG, type = size, size_out = 16738 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG, size = 1048560, size_out = 16738 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 16752 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF, type = size, size_out = 1439 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF, size = 1048560, size_out = 1439 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1440 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG, type = size, size_out = 37112 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG, size = 1048560, size_out = 37112 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 37120 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF, type = size, size_out = 3611 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF, size = 1048560, size_out = 3611 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 3616 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, type = size, size_out = 21812 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, size = 1048560, size_out = 21812 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 21824 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG, type = size, size_out = 42453 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG, size = 1048560, size_out = 42453 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 42464 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF, type = size, size_out = 1571 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF, size = 1048560, size_out = 1571 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1584 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF |
|
1 | |
| File | Get Info | type = size, size_out = 30170 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG, size = 1048560, size_out = 30170 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 30176 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG, size = 1048560, size_out = 944994 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM.id-9C354B42.[my0day@aol.com].0day, size = 945008 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, size = 1048560, size_out = 17248 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl.id-9C354B42.[my0day@aol.com].0day, size = 17264 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl.id-9C354B42.[my0day@aol.com].0day, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, type = size, size_out = 18738 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, size = 1048560, size_out = 18738 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.id-9C354B42.[my0day@aol.com].0day, size = 18752 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.id-9C354B42.[my0day@aol.com].0day, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, type = size, size_out = 30948 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl, size = 1048560, size_out = 30948 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl.id-9C354B42.[my0day@aol.com].0day, size = 30960 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl, type = size, size_out = 28974 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl, size = 1048560, size_out = 28974 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl.id-9C354B42.[my0day@aol.com].0day, size = 28976 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl, type = size, size_out = 34076 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl, size = 1048560, size_out = 34076 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.id-9C354B42.[my0day@aol.com].0day, size = 34080 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl, type = size, size_out = 32146 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl, size = 1048560, size_out = 32146 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl.id-9C354B42.[my0day@aol.com].0day, size = 32160 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl, type = size, size_out = 39515 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl, size = 1048560, size_out = 39515 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl.id-9C354B42.[my0day@aol.com].0day, size = 39520 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 14873 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 14880 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 13254 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, size = 1048560, size_out = 13254 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 13264 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, size = 1048560, size_out = 3344 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3360 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, type = size, size_out = 1596 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, size = 1048560, size_out = 1596 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1600 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, size = 1048560, size_out = 7968 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 7984 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, size = 1048560, size_out = 1832 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1840 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 7540 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 7552 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 6632 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 6640 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 2108 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, size = 1048560, size_out = 2108 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2112 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, size = 1048560, size_out = 9240 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 9248 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, size = 1048560, size_out = 2344 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2352 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, size = 1048560, size_out = 6060 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 6064 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, size = 1048560, size_out = 3416 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3424 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 2636 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2640 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 11636 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 11648 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 22516 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 22528 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 26748 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 26752 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 7966 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 7968 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 20189 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 20192 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 8772 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 8784 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 14486 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 14496 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, size = 1048560 |
|
1 |
Thread 0xac8
498
0
| Category | Operation | Information | Success | Count | Logfile |
|---|
Thread 0xacc
2000
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\Boot\BCD, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\BCD.LOG1, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\BCD.LOG1, type = size, size_out = 0 |
|
1 | |
| File | Create | filename = C:\Boot\BCD.LOG2, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\BCD.LOG2, type = size, size_out = 0 |
|
1 | |
| File | Create | filename = C:\Boot\cs-CZ\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\cs-CZ\bootmgr.exe.mui, type = size, size_out = 89168 |
|
1 | |
| File | Get Info | filename = C:\Boot\cs-CZ\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\cs-CZ\bootmgr.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\cs-CZ\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\da-DK\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\da-DK\bootmgr.exe.mui, type = size, size_out = 87616 |
|
1 | |
| File | Get Info | filename = C:\Boot\da-DK\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\da-DK\bootmgr.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\da-DK\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\de-DE\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\de-DE\bootmgr.exe.mui, type = size, size_out = 91712 |
|
1 | |
| File | Get Info | filename = C:\Boot\de-DE\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\de-DE\bootmgr.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\de-DE\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\el-GR\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\el-GR\bootmgr.exe.mui, type = size, size_out = 94800 |
|
1 | |
| File | Get Info | filename = C:\Boot\el-GR\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\el-GR\bootmgr.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\el-GR\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\el-GR\bootmgr.exe.mui, type = size, size_out = 85056 |
|
1 | |
| File | Get Info | filename = C:\Boot\en-US\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\en-US\bootmgr.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\en-US\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\el-GR\bootmgr.exe.mui, type = size, size_out = 43600 |
|
1 | |
| File | Get Info | filename = C:\Boot\en-US\memtest.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\en-US\memtest.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\en-US\memtest.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\el-GR\bootmgr.exe.mui, type = size, size_out = 90192 |
|
1 | |
| File | Get Info | filename = C:\Boot\es-ES\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\es-ES\bootmgr.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\es-ES\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\el-GR\bootmgr.exe.mui, type = size, size_out = 89152 |
|
1 | |
| File | Get Info | filename = C:\Boot\fi-FI\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\fi-FI\bootmgr.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\fi-FI\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\el-GR\bootmgr.exe.mui, type = size, size_out = 3694080 |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\chs_boot.ttf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\chs_boot.ttf.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Boot\Fonts\chs_boot.ttf, destination_filename = C:\Boot\Fonts\chs_boot.ttf.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 786702 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab, type = size, size_out = 9958388 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 786686 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi, type = size, size_out = 2522624 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 786690 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab, type = size, size_out = 13642474 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab, destination_filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[my0day@aol.com].0day, size = 786686 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi, type = size, size_out = 3124224 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 786698 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi, type = size, size_out = 2797568 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, type = size, size_out = 2511872 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 786696 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE, type = size, size_out = 838536 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE, size = 1048560, size_out = 838536 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE.id-9C354B42.[my0day@aol.com].0day, size = 838544 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE.id-9C354B42.[my0day@aol.com].0day, size = 228 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi, type = size, size_out = 3702272 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 786694 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab, type = size, size_out = 28016276 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 786686 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe, type = size, size_out = 174440 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe, size = 1048560, size_out = 174440 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[my0day@aol.com].0day, size = 174448 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[my0day@aol.com].0day, size = 226 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll, type = size, size_out = 7378792 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll, destination_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[my0day@aol.com].0day, size = 786688 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab, type = size, size_out = 177720283 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab, destination_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, size = 786690 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 1463568 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[my0day@aol.com].0day, size = 1048560 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 415008 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[my0day@aol.com].0day, size = 415024 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, type = size, size_out = 36233052 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, destination_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[my0day@aol.com].0day, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab, type = size, size_out = 195011319 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab, destination_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.id-9C354B42.[my0day@aol.com].0day, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, type = size, size_out = 1369952 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, size = 1048560, size_out = 321392 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL.id-9C354B42.[my0day@aol.com].0day, size = 321408 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL, type = size, size_out = 2124664 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[my0day@aol.com].0day, size = 786690 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 241024 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT, size = 1048560, size_out = 241024 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT.id-9C354B42.[my0day@aol.com].0day, size = 241040 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM, type = size, size_out = 1908 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM, size = 1048560, size_out = 1908 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM.id-9C354B42.[my0day@aol.com].0day, size = 1920 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM.id-9C354B42.[my0day@aol.com].0day, size = 224 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG, type = size, size_out = 1382 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG, size = 1048560, size_out = 1382 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG.id-9C354B42.[my0day@aol.com].0day, size = 1392 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG.id-9C354B42.[my0day@aol.com].0day, size = 224 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT, type = size, size_out = 73080 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT, size = 1048560, size_out = 73080 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT.id-9C354B42.[my0day@aol.com].0day, size = 73088 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, type = size, size_out = 280448 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, size = 1048560, size_out = 280448 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT.id-9C354B42.[my0day@aol.com].0day, size = 280464 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui, type = size, size_out = 4096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe, type = size, size_out = 193024 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, type = size, size_out = 4096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\tipresx.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui, size = 1048560, size_out = 154448 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL.id-9C354B42.[my0day@aol.com].0day, size = 154464 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL, type = size, size_out = 55680 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL, size = 1048560, size_out = 55680 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL.id-9C354B42.[my0day@aol.com].0day, size = 55696 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL.id-9C354B42.[my0day@aol.com].0day, size = 250 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, type = size, size_out = 41864 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, size = 1048560, size_out = 41864 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[my0day@aol.com].0day, size = 41872 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL, type = size, size_out = 11656 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL, size = 1048560, size_out = 11656 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL.id-9C354B42.[my0day@aol.com].0day, size = 11664 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll, type = size, size_out = 105344 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll, size = 1048560, size_out = 105344 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll.id-9C354B42.[my0day@aol.com].0day, size = 105360 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll.id-9C354B42.[my0day@aol.com].0day, size = 238 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL, type = size, size_out = 1012648 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL, size = 1048560 |
|
1 |
Thread 0xad0
1703
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\Boot\Fonts\kor_boot.ttf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\BOOTSECT.BAK.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 2371360 |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\kor_boot.ttf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\kor_boot.ttf.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Boot\Fonts\kor_boot.ttf, destination_filename = C:\Boot\Fonts\kor_boot.ttf.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi, type = size, size_out = 2506240 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi, type = size, size_out = 2513920 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 786700 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab, type = size, size_out = 14819276 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 786690 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi, type = size, size_out = 875520 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi, size = 1048560, size_out = 875520 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, size = 875536 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi, type = size, size_out = 881152 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi, size = 1048560, size_out = 881152 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML, size = 881168 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi, type = size, size_out = 885760 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi, size = 1048560, size_out = 885760 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[my0day@aol.com].0day, size = 885776 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi, type = size, size_out = 868864 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi, size = 1048560, size_out = 868864 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id-9C354B42.[my0day@aol.com].0day, size = 868880 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab, type = size, size_out = 2928955 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[my0day@aol.com].0day, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab, type = size, size_out = 50823389 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 786690 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab, type = size, size_out = 17456632 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 786690 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi, type = size, size_out = 2507776 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 786694 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll, type = size, size_out = 107912 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll, size = 1048560, size_out = 107912 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 107920 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab, type = size, size_out = 14127746 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi, type = size, size_out = 191872 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll, size = 1048560, size_out = 191872 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll.id-9C354B42.[my0day@aol.com].0day, size = 191888 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi, type = size, size_out = 1992192 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi, destination_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[my0day@aol.com].0day, size = 786696 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, type = size, size_out = 715834 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 1048560, size_out = 715834 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[my0day@aol.com].0day, size = 715840 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[my0day@aol.com].0day, size = 260 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 1377656 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[my0day@aol.com].0day, size = 1048560 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 329096 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 329104 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF, type = size, size_out = 36233052 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, destination_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[my0day@aol.com].0day, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab, type = size, size_out = 162970271 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab, destination_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.id-9C354B42.[my0day@aol.com].0day, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, type = size, size_out = 715834 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 1048560, size_out = 715834 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[my0day@aol.com].0day, size = 715840 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[my0day@aol.com].0day, size = 260 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 1377656 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[my0day@aol.com].0day, size = 1048560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, size = 1048560, size_out = 329096 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[my0day@aol.com].0day, size = 329104 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE, type = size, size_out = 994184 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE, size = 1048560, size_out = 994184 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE.id-9C354B42.[my0day@aol.com].0day, size = 994192 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE.id-9C354B42.[my0day@aol.com].0day, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG, type = size, size_out = 6811 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG, size = 1048560, size_out = 6811 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG.id-9C354B42.[my0day@aol.com].0day, size = 6816 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, type = size, size_out = 323936 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, size = 1048560, size_out = 323936 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT.id-9C354B42.[my0day@aol.com].0day, size = 323952 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 606062 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT, size = 1048560, size_out = 606062 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT.id-9C354B42.[my0day@aol.com].0day, size = 606064 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT, type = size, size_out = 302976 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT, size = 1048560, size_out = 302976 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT.id-9C354B42.[my0day@aol.com].0day, size = 302992 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL, type = size, size_out = 1831424 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[my0day@aol.com].0day, size = 786692 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui, type = size, size_out = 8704 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe, type = size, size_out = 695296 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL, type = size, size_out = 52656 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL, size = 1048560, size_out = 52656 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL.id-9C354B42.[my0day@aol.com].0day, size = 52672 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL, type = size, size_out = 20944 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL, size = 1048560, size_out = 20944 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL.id-9C354B42.[my0day@aol.com].0day, size = 20960 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL, type = size, size_out = 862608 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL, size = 1048560, size_out = 862608 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL.id-9C354B42.[my0day@aol.com].0day, size = 862624 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL, type = size, size_out = 744888 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL, size = 1048560 |
|
1 |
Thread 0xad4
2043
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\Boot\Fonts\jpn_boot.ttf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\jpn_boot.ttf, type = size, size_out = 1984228 |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\jpn_boot.ttf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\jpn_boot.ttf.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Boot\Fonts\jpn_boot.ttf, destination_filename = C:\Boot\Fonts\jpn_boot.ttf.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\Boot\fr-FR\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\fr-FR\bootmgr.exe.mui, type = size, size_out = 93248 |
|
1 | |
| File | Get Info | filename = C:\Boot\fr-FR\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\fr-FR\bootmgr.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\fr-FR\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\hu-HU\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\hu-HU\bootmgr.exe.mui, type = size, size_out = 90688 |
|
1 | |
| File | Get Info | filename = C:\Boot\hu-HU\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\hu-HU\bootmgr.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\hu-HU\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\it-IT\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\it-IT\bootmgr.exe.mui, type = size, size_out = 90704 |
|
1 | |
| File | Get Info | filename = C:\Boot\it-IT\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\it-IT\bootmgr.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\it-IT\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\ja-JP\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\ja-JP\bootmgr.exe.mui, type = size, size_out = 76352 |
|
1 | |
| File | Get Info | filename = C:\Boot\ja-JP\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\ja-JP\bootmgr.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\ja-JP\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\ko-KR\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\ko-KR\bootmgr.exe.mui, type = size, size_out = 75344 |
|
1 | |
| File | Get Info | filename = C:\Boot\ko-KR\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\ko-KR\bootmgr.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\ko-KR\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\memtest.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\memtest.exe, type = size, size_out = 485760 |
|
1 | |
| File | Get Info | filename = C:\Boot\memtest.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\memtest.exe.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\memtest.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 786690 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi, type = size, size_out = 2865664 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 786696 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab, type = size, size_out = 11482605 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab, destination_filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[my0day@aol.com].0day, size = 786686 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi, type = size, size_out = 873984 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi, size = 1048560, size_out = 873984 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 874000 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 242 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab, type = size, size_out = 18874884 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 786686 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 8265165 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 786688 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll, type = size, size_out = 526176 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll, size = 1048560, size_out = 526176 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll.id-9C354B42.[my0day@aol.com].0day, size = 526192 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest, type = size, size_out = 1857 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest, size = 1048560, size_out = 1857 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest.id-9C354B42.[my0day@aol.com].0day, size = 1872 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest.id-9C354B42.[my0day@aol.com].0day, size = 266 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll, type = size, size_out = 655872 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll, size = 1048560, size_out = 655872 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll.id-9C354B42.[my0day@aol.com].0day, size = 655888 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST, size = 1048560, size_out = 3584 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST.id-9C354B42.[my0day@aol.com].0day, size = 3600 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi, type = size, size_out = 2517504 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 786694 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi, type = size, size_out = 27532288 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi, destination_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.id-9C354B42.[my0day@aol.com].0day, size = 786696 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe, type = size, size_out = 174440 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe, size = 1048560, size_out = 174440 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[my0day@aol.com].0day, size = 174448 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[my0day@aol.com].0day, size = 226 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll, type = size, size_out = 7378792 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll, destination_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[my0day@aol.com].0day, size = 786688 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 10798080 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi, destination_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi.id-9C354B42.[my0day@aol.com].0day, size = 786694 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 1377656 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[my0day@aol.com].0day, size = 1048560 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 329096 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[my0day@aol.com].0day, size = 329104 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe, type = size, size_out = 174440 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe, size = 1048560, size_out = 174440 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[my0day@aol.com].0day, size = 174448 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[my0day@aol.com].0day, size = 226 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll, type = size, size_out = 7378792 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll, destination_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[my0day@aol.com].0day, size = 786688 |
|
1 | |
| File | Write | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi, type = size, size_out = 12060672 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi, destination_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.id-9C354B42.[my0day@aol.com].0day, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 64096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, size = 1048560, size_out = 64096 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL.id-9C354B42.[my0day@aol.com].0day, size = 64112 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL.id-9C354B42.[my0day@aol.com].0day, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, type = size, size_out = 2557 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, size = 1048560, size_out = 2557 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT.id-9C354B42.[my0day@aol.com].0day, size = 2560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, type = size, size_out = 543304 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, size = 1048560, size_out = 543304 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE.id-9C354B42.[my0day@aol.com].0day, size = 543312 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest, type = size, size_out = 566 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest, size = 1048560, size_out = 566 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest.id-9C354B42.[my0day@aol.com].0day, size = 576 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest.id-9C354B42.[my0day@aol.com].0day, size = 254 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP, type = size, size_out = 176311 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP, size = 1048560, size_out = 176311 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP.id-9C354B42.[my0day@aol.com].0day, size = 176320 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF, type = size, size_out = 7656 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF, size = 1048560, size_out = 7656 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF.id-9C354B42.[my0day@aol.com].0day, size = 7664 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL, type = size, size_out = 31104 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL, size = 1048560, size_out = 31104 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[my0day@aol.com].0day, size = 31120 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, type = size, size_out = 38768 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, size = 1048560, size_out = 38768 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll.id-9C354B42.[my0day@aol.com].0day, size = 38784 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, type = size, size_out = 1312656 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id-9C354B42.[my0day@aol.com].0day, size = 1048560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, size = 1048560, size_out = 264096 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id-9C354B42.[my0day@aol.com].0day, size = 264112 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, type = size, size_out = 1486736 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll.id-9C354B42.[my0day@aol.com].0day, size = 1048560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, size = 1048560, size_out = 438176 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, size = 438192 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT, type = size, size_out = 320384 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT, size = 1048560, size_out = 320384 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT.id-9C354B42.[my0day@aol.com].0day, size = 320400 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, type = size, size_out = 1257984 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll.id-9C354B42.[my0day@aol.com].0day, size = 1048560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, size = 1048560, size_out = 209424 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll.id-9C354B42.[my0day@aol.com].0day, size = 209440 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll.id-9C354B42.[my0day@aol.com].0day, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui, type = size, size_out = 2560 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\tipresx.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL, type = size, size_out = 2528128 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id-9C354B42.[my0day@aol.com].0day, size = 786690 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL, type = size, size_out = 3213192 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
1 |
Thread 0xad8
1752
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\Boot\Fonts\cht_boot.ttf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\cht_boot.ttf, type = size, size_out = 3876772 |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\cht_boot.ttf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\cht_boot.ttf.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Boot\Fonts\cht_boot.ttf, destination_filename = C:\Boot\Fonts\cht_boot.ttf.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, type = size, size_out = 70361744 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 786686 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab, type = size, size_out = 43806141 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 786688 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab, type = size, size_out = 21064532 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab, destination_filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[my0day@aol.com].0day, size = 786686 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi, type = size, size_out = 2503680 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 786696 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab, type = size, size_out = 4095519 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 519584 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe, size = 1048560, size_out = 519584 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe.id-9C354B42.[my0day@aol.com].0day, size = 519600 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi, type = size, size_out = 868864 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi, size = 1048560, size_out = 868864 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi.id-9C354B42.[my0day@aol.com].0day, size = 868880 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi.id-9C354B42.[my0day@aol.com].0day, size = 244 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi, type = size, size_out = 868864 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi, size = 1048560, size_out = 868864 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi.id-9C354B42.[my0day@aol.com].0day, size = 868880 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi.id-9C354B42.[my0day@aol.com].0day, size = 244 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, type = size, size_out = 36233052 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, destination_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[my0day@aol.com].0day, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll, type = size, size_out = 1463568 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[my0day@aol.com].0day, size = 1048560 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 415008 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[my0day@aol.com].0day, size = 415024 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab, type = size, size_out = 222948913 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab, destination_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.id-9C354B42.[my0day@aol.com].0day, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi, type = size, size_out = 1992192 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi, destination_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[my0day@aol.com].0day, size = 786696 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 715834 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 1048560, size_out = 715834 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[my0day@aol.com].0day, size = 715840 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[my0day@aol.com].0day, size = 260 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi, type = size, size_out = 1992192 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi, destination_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[my0day@aol.com].0day, size = 786696 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[my0day@aol.com].0day, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, type = size, size_out = 1463568 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[my0day@aol.com].0day, size = 1048560 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 415008 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[my0day@aol.com].0day, size = 415024 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll |
|
1 | |
| File | Create | filename = C:\pagefile.sys, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, type = size, size_out = 99136 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, size = 1048560, size_out = 99136 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL.id-9C354B42.[my0day@aol.com].0day, size = 99152 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, type = size, size_out = 629664 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, size = 1048560, size_out = 629664 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE.id-9C354B42.[my0day@aol.com].0day, size = 629680 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 712592 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, size = 1048560, size_out = 712592 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT.id-9C354B42.[my0day@aol.com].0day, size = 712608 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, type = size, size_out = 430080 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, size = 1048560, size_out = 430080 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll.id-9C354B42.[my0day@aol.com].0day, size = 430096 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui, type = size, size_out = 22528 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui, type = size, size_out = 10240 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui, type = size, size_out = 2560 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui, type = size, size_out = 2560 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui, type = size, size_out = 43520 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui, type = size, size_out = 3072 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui, type = size, size_out = 3072 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui, type = size, size_out = 32768 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui, size = 1048560, size_out = 419232 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL.id-9C354B42.[my0day@aol.com].0day, size = 419248 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui, type = size, size_out = 26624 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe, type = size, size_out = 378880 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL, type = size, size_out = 198056 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL, size = 1048560, size_out = 198056 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL.id-9C354B42.[my0day@aol.com].0day, size = 198064 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL, type = size, size_out = 1388416 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 339856 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.id-9C354B42.[my0day@aol.com].0day, size = 339872 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.id-9C354B42.[my0day@aol.com].0day, size = 252 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL, type = size, size_out = 43408 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL, size = 1048560, size_out = 43408 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL.id-9C354B42.[my0day@aol.com].0day, size = 43424 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL.id-9C354B42.[my0day@aol.com].0day, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL, type = size, size_out = 442272 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL, size = 1048560 |
|
1 |
Thread 0xadc
747
0
| Category | Operation | Information | Success | Count | Logfile |
|---|
Process #2: cmd.exe
246
0
| Information | Value |
|---|---|
| ID | #2 |
| File Name | c:\windows\system32\cmd.exe |
| Command Line | "C:\Windows\system32\cmd.exe" |
| Initial Working Directory | C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ |
| Monitor | Start Time: 00:00:30, Reason: Child Process |
| Unmonitor | End Time: 00:00:59, Reason: Self Terminated |
| Monitor Duration | 00:00:28 |
OS Process Information
| Information | Value |
|---|---|
| PID | 0xa84 |
| Parent PID | 0xa70 (c:\users\5p5nrgjn0js halpmcxz\desktop\agent1c.exe) |
| Bitness | 64-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | XDUWTFONO\5p5NrGJn0jS HALPmcxz |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
A88
|
Threads
Thread 0xa88
246
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| System | Get Time | type = System Time, time = 2019-06-16 17:55:31 (UTC) |
|
1 | |
| System | Get Time | type = Ticks, time = 99107 |
|
1 | |
| System | Get Time | type = Performance Ctr, time = 15257046584 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\system32\cmd.exe, base_address = 0x4a8b0000 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\system32\kernel32.dll, base_address = 0x76e30000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\system32\kernel32.dll, function = SetThreadUILanguage, address_out = 0x76e46d40 |
|
1 | |
| Registry | Open Key | reg_name = HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
2 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| Environment | Get Environment String | - |
|
2 | |
| Registry | Open Key | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DisableUNCCheck, data = 24, type = REG_NONE |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DelayedExpansion, data = 1, type = REG_NONE |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = CompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = PathCompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = AutoRun, data = 64, type = REG_NONE |
|
1 | |
| Registry | Open Key | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DisableUNCCheck, data = 64, type = REG_NONE |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DelayedExpansion, data = 1, type = REG_NONE |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = CompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = PathCompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = AutoRun, data = 9, type = REG_NONE |
|
1 | |
| Module | Get Filename | process_name = c:\windows\system32\cmd.exe, file_name_orig = C:\Windows\system32\cmd.exe, size = 260 |
|
1 | |
| Environment | Get Environment String | name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ |
|
1 | |
| Environment | Get Environment String | name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC |
|
1 | |
| Environment | Get Environment String | name = PROMPT |
|
1 | |
| Environment | Set Environment String | name = PROMPT, value = $P$G |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Environment | Get Environment String | name = COMSPEC, result_out = C:\Windows\system32\cmd.exe |
|
1 | |
| Environment | Get Environment String | name = KEYS |
|
1 | |
| File | Get Info | filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop, type = file_attributes |
|
2 | |
| Environment | Set Environment String | name = =C:, value = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| System | Get Info | type = Operating System |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 36 |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 2 |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 63 |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 2 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\system32\kernel32.dll, base_address = 0x76e30000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\system32\kernel32.dll, function = CopyFileExW, address_out = 0x76e423d0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\system32\kernel32.dll, function = IsDebuggerPresent, address_out = 0x76e38290 |
|
1 | |
| Module | Get Address | module_name = c:\windows\system32\kernel32.dll, function = SetConsoleInputExeNameW, address_out = 0x76e417e0 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_INPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 2 |
|
1 | |
| Environment | Get Environment String | name = PROMPT, result_out = $P$G |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 38 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_INPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_INPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 24 |
|
1 | |
| Environment | Get Environment String | name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ |
|
1 | |
| Environment | Get Environment String | name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC |
|
1 | |
| Process | Create | process_name = C:\Windows\system32\mode.com, os_pid = 0xac0, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL |
|
1 | |
| Environment | Set Environment String | name = COPYCMD |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Module | Load | module_name = NTDLL.DLL, base_address = 0x76f50000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\system32\ntdll.dll, function = NtQueryInformationProcess, address_out = 0x76fa14a0 |
|
1 | |
| Process | Get Info | type = PROCESS_BASIC_INFORMATION |
|
1 | |
| Memory | Read | process_name = C:\Windows\system32\mode.com, address = 8796092887040, size = 896 |
|
1 | |
| Environment | Set Environment String | name = =ExitCode, value = 00000000 |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Environment | Set Environment String | name = =ExitCodeAscii |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
2 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 2 |
|
1 | |
| Environment | Get Environment String | name = PROMPT, result_out = $P$G |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 38 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_INPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_INPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 36 |
|
1 | |
| Environment | Get Environment String | name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ |
|
1 | |
| Environment | Get Environment String | name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC |
|
1 | |
| Process | Create | process_name = C:\Windows\system32\vssadmin.exe, os_pid = 0xae0, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL |
|
1 | |
| Environment | Set Environment String | name = COPYCMD |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Process | Get Info | type = PROCESS_BASIC_INFORMATION |
|
1 | |
| Memory | Read | process_name = C:\Windows\system32\vssadmin.exe, address = 8796092846080, size = 896 |
|
1 |
Process #3: mode.com
0
0
| Information | Value |
|---|---|
| ID | #3 |
| File Name | c:\windows\system32\mode.com |
| Command Line | mode con cp select=1251 |
| Initial Working Directory | C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ |
| Monitor | Start Time: 00:00:32, Reason: Child Process |
| Unmonitor | End Time: 00:00:33, Reason: Self Terminated |
| Monitor Duration | 00:00:01 |
| Remark | No high level activity detected in monitored regions |
OS Process Information
| Information | Value |
|---|---|
| PID | 0xac0 |
| Parent PID | 0xa84 (c:\windows\system32\cmd.exe) |
| Bitness | 64-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | XDUWTFONO\5p5NrGJn0jS HALPmcxz |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
AC4
|
Process #4: vssadmin.exe
0
0
| Information | Value |
|---|---|
| ID | #4 |
| File Name | c:\windows\system32\vssadmin.exe |
| Command Line | vssadmin delete shadows /all /quiet |
| Initial Working Directory | C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ |
| Monitor | Start Time: 00:00:32, Reason: Child Process |
| Unmonitor | End Time: 00:00:59, Reason: Self Terminated |
| Monitor Duration | 00:00:26 |
| Remark | No high level activity detected in monitored regions |
OS Process Information
| Information | Value |
|---|---|
| PID | 0xae0 |
| Parent PID | 0xa84 (c:\windows\system32\cmd.exe) |
| Bitness | 64-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | XDUWTFONO\5p5NrGJn0jS HALPmcxz |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
AE4
0x
AE8
0x
AEC
0x
AF0
0x
AF4
|
Process #5: vssvc.exe
3
0
| Information | Value |
|---|---|
| ID | #5 |
| File Name | c:\windows\system32\vssvc.exe |
| Command Line | C:\Windows\system32\vssvc.exe |
| Initial Working Directory | C:\Windows\system32\ |
| Monitor | Start Time: 00:00:40, Reason: RPC Server |
| Unmonitor | End Time: 00:04:35, Reason: Terminated by Timeout |
| Monitor Duration | 00:03:54 |
OS Process Information
| Information | Value |
|---|---|
| PID | 0xaf8 |
| Parent PID | 0x1cc (c:\windows\system32\services.exe) |
| Bitness | 64-bit |
| Is Created or Modified Executable |
|
| Integrity Level | System (Elevated) |
| Username | NT AUTHORITY\SYSTEM |
| Enabled Privileges | SeLockMemoryPrivilege, SeTcbPrivilege, SeSystemProfilePrivilege, SeProfileSingleProcessPrivilege, SeIncreaseBasePriorityPrivilege, SeCreatePagefilePrivilege, SeCreatePermanentPrivilege, SeBackupPrivilege, SeRestorePrivilege, SeDebugPrivilege, SeAuditPrivilege, SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege, SeIncreaseWorkingSetPrivilege, SeTimeZonePrivilege, SeCreateSymbolicLinkPrivilege |
| Thread IDs |
0x
BB4
0x
BB0
0x
BA8
0x
B9C
0x
B98
0x
B08
0x
B00
0x
AFC
0x
BD0
0x
848
0x
53C
|
Threads
Thread 0xb9c
3
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| System | Get Time | type = System Time, time = 2019-06-16 17:55:40 (UTC) |
|
1 | |
| System | Get Time | type = Ticks, time = 108030 |
|
1 | |
| System | Get Time | type = Performance Ctr, time = 16290756808 |
|
1 |
Process #7: agent1c.exe
111
0
| Information | Value |
|---|---|
| ID | #7 |
| File Name | c:\programdata\microsoft\windows\start menu\programs\startup\agent1c.exe |
| Command Line | "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\agent1c.exe" |
| Initial Working Directory | C:\Windows\system32\ |
| Monitor | Start Time: 00:04:12, Reason: Autostart |
| Unmonitor | End Time: 00:04:20, Reason: Self Terminated |
| Monitor Duration | 00:00:07 |
OS Process Information
| Information | Value |
|---|---|
| PID | 0x4e8 |
| Parent PID | 0x3a4 (c:\windows\explorer.exe) |
| Bitness | 32-bit |
| Is Created or Modified Executable |
|
| Integrity Level | Medium |
| Username | XDUWTFONO\5p5NrGJn0jS HALPmcxz |
| Enabled Privileges | SeChangeNotifyPrivilege |
| Thread IDs |
0x
4EC
|
Threads
Thread 0x4ec
111
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Load | module_name = kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetProcAddress, address_out = 0x74db1222 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetModuleHandleW, address_out = 0x74db34b0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FindNextFileW, address_out = 0x74db54ee |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FindClose, address_out = 0x74db4442 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = MoveFileW, address_out = 0x74dc9af0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetFileSizeEx, address_out = 0x74db59e2 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetModuleFileNameW, address_out = 0x74db4950 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetFileAttributesW, address_out = 0x74db1b18 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = ExitProcess, address_out = 0x74db7a10 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetCommandLineW, address_out = 0x74db5223 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetComputerNameW, address_out = 0x74dbdd0e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetComputerNameA, address_out = 0x74dcb6e0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateMutexW, address_out = 0x74db424c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = lstrlenW, address_out = 0x74db1700 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = lstrlenA, address_out = 0x74db5a4b |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetCurrentProcess, address_out = 0x74db1809 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WaitForSingleObject, address_out = 0x74db1136 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetLogicalDrives, address_out = 0x74db5371 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetTickCount, address_out = 0x74db110c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = DeleteFileW, address_out = 0x74db89b3 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WideCharToMultiByte, address_out = 0x74db170d |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = InitializeCriticalSectionAndSpinCount, address_out = 0x74db1916 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Sleep, address_out = 0x74db10ff |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = LeaveCriticalSection, address_out = 0x77202270 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = ReadFile, address_out = 0x74db3ed3 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateFileW, address_out = 0x74db3f5c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = OpenMutexW, address_out = 0x74db5151 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = EnterCriticalSection, address_out = 0x772022b0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WaitForMultipleObjects, address_out = 0x74db4220 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = lstrcmpiW, address_out = 0x74dcd5cd |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = lstrcmpiA, address_out = 0x74db3e8e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = DeleteCriticalSection, address_out = 0x772145f5 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = ReleaseMutex, address_out = 0x74db111e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CloseHandle, address_out = 0x74db1410 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetVersion, address_out = 0x74db4467 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateThread, address_out = 0x74db34d5 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = ExpandEnvironmentStringsW, address_out = 0x74db4173 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = QueryPerformanceCounter, address_out = 0x74db1725 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = QueryPerformanceFrequency, address_out = 0x74db41f0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetCurrentProcessId, address_out = 0x74db11f8 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetFileAttributesW, address_out = 0x74dcd4f7 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetVolumeInformationW, address_out = 0x74dcc860 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WriteFile, address_out = 0x74db1282 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetFilePointerEx, address_out = 0x74dcc807 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetEndOfFile, address_out = 0x74dcce2e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FindFirstFileW, address_out = 0x74db4435 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetProcessHeap, address_out = 0x74db14e9 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = HeapReAlloc, address_out = 0x77221f6e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = HeapAlloc, address_out = 0x7720e026 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = HeapFree, address_out = 0x74db14c9 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreatePipe, address_out = 0x74e3415b |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetHandleInformation, address_out = 0x74dc195c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateProcessW, address_out = 0x74db103d |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CompareStringW, address_out = 0x74db3bca |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CompareStringA, address_out = 0x74db3c5a |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = OpenProcess, address_out = 0x74db1986 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = TerminateProcess, address_out = 0x74dcd802 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetSystemTime, address_out = 0x74db5a96 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SystemTimeToFileTime, address_out = 0x74db5a7e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetLastError, address_out = 0x74db11c0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateToolhelp32Snapshot, address_out = 0x74dd735f |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Process32NextW, address_out = 0x74dd896c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Process32FirstW, address_out = 0x74dd8baf |
|
1 | |
| Module | Load | module_name = advapi32.dll, base_address = 0x76cd0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = RegOpenKeyExW, address_out = 0x76ce468d |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = RegQueryValueExW, address_out = 0x76ce46ad |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = RegSetValueExW, address_out = 0x76ce14d6 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = RegCloseKey, address_out = 0x76ce469d |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = OpenProcessToken, address_out = 0x76ce4304 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = GetTokenInformation, address_out = 0x76ce431c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = OpenSCManagerW, address_out = 0x76cdca64 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = OpenServiceW, address_out = 0x76cdca4c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = CloseServiceHandle, address_out = 0x76ce369c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = ControlService, address_out = 0x76cf7144 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = QueryServiceStatus, address_out = 0x76ce2a86 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = EnumDependentServicesW, address_out = 0x76cd1e3a |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = EnumServicesStatusExW, address_out = 0x76cdb466 |
|
1 | |
| Module | Load | module_name = user32.dll, base_address = 0x75890000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\user32.dll, function = SystemParametersInfoW, address_out = 0x758a90d3 |
|
1 | |
| Module | Load | module_name = Shell32.dll, base_address = 0x75c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\shell32.dll, function = ShellExecuteExW, address_out = 0x75c41e46 |
|
1 | |
| Module | Load | module_name = ntdll.dll, base_address = 0x771e0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x771ffda0 |
|
1 | |
| Module | Load | module_name = mpr.dll, base_address = 0x72da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\mpr.dll, function = WNetCloseEnum, address_out = 0x72da2dd6 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\mpr.dll, function = WNetOpenEnumW, address_out = 0x72da2f06 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\mpr.dll, function = WNetEnumResourceW, address_out = 0x72da3058 |
|
1 | |
| Module | Load | module_name = ws2_32.dll, base_address = 0x75560000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = WSAStartup, address_out = 0x75563ab2 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = socket, address_out = 0x75563eb8 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = send, address_out = 0x75566f01 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = recv, address_out = 0x75566b0e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = connect, address_out = 0x75566bdd |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = closesocket, address_out = 0x75563918 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = gethostbyname, address_out = 0x75577673 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = inet_addr, address_out = 0x7556311b |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = ntohl, address_out = 0x75562d57 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = htonl, address_out = 0x75562d57 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = htons, address_out = 0x75562d8b |
|
1 | |
| System | Get Time | type = Performance Ctr, time = 7194224003 |
|
1 | |
| System | Get Time | type = Ticks, time = 28672 |
|
3 | |
| System | Get Info | type = Operating System |
|
1 | |
| Mutex | Open | mutex_name = Global\syncronize_WRZB2LA, desired_access = SYNCHRONIZE |
|
1 | |
| Mutex | Open | mutex_name = Global\syncronize_WRZB2LU, desired_access = SYNCHRONIZE |
|
1 | |
| System | Get Info | type = Operating System |
|
1 |
Process #8: agent1c.exe
17487
0
| Information | Value |
|---|---|
| ID | #8 |
| File Name | c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\agent1c.exe |
| Command Line | "C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\agent1c.exe" |
| Initial Working Directory | C:\Windows\system32\ |
| Monitor | Start Time: 00:04:12, Reason: Autostart |
| Unmonitor | End Time: 00:04:35, Reason: Terminated by Timeout |
| Monitor Duration | 00:00:22 |
OS Process Information
| Information | Value |
|---|---|
| PID | 0x4f0 |
| Parent PID | 0x3a4 (c:\windows\explorer.exe) |
| Bitness | 32-bit |
| Is Created or Modified Executable |
|
| Integrity Level | Medium |
| Username | XDUWTFONO\5p5NrGJn0jS HALPmcxz |
| Enabled Privileges | SeChangeNotifyPrivilege |
| Thread IDs |
0x
4F4
0x
594
0x
618
0x
61C
0x
620
0x
624
0x
630
0x
680
0x
684
0x
688
0x
68C
0x
690
0x
698
0x
69C
0x
6A0
0x
6A4
0x
6A8
0x
6AC
0x
6B0
0x
6BC
|
Threads
Thread 0x4f4
316
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Load | module_name = kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetProcAddress, address_out = 0x74db1222 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetModuleHandleW, address_out = 0x74db34b0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FindNextFileW, address_out = 0x74db54ee |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FindClose, address_out = 0x74db4442 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = MoveFileW, address_out = 0x74dc9af0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetFileSizeEx, address_out = 0x74db59e2 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetModuleFileNameW, address_out = 0x74db4950 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetFileAttributesW, address_out = 0x74db1b18 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = ExitProcess, address_out = 0x74db7a10 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetCommandLineW, address_out = 0x74db5223 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetComputerNameW, address_out = 0x74dbdd0e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetComputerNameA, address_out = 0x74dcb6e0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateMutexW, address_out = 0x74db424c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = lstrlenW, address_out = 0x74db1700 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = lstrlenA, address_out = 0x74db5a4b |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetCurrentProcess, address_out = 0x74db1809 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WaitForSingleObject, address_out = 0x74db1136 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetLogicalDrives, address_out = 0x74db5371 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetTickCount, address_out = 0x74db110c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = DeleteFileW, address_out = 0x74db89b3 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WideCharToMultiByte, address_out = 0x74db170d |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = InitializeCriticalSectionAndSpinCount, address_out = 0x74db1916 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Sleep, address_out = 0x74db10ff |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = LeaveCriticalSection, address_out = 0x77202270 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = ReadFile, address_out = 0x74db3ed3 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateFileW, address_out = 0x74db3f5c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = OpenMutexW, address_out = 0x74db5151 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = EnterCriticalSection, address_out = 0x772022b0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WaitForMultipleObjects, address_out = 0x74db4220 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = lstrcmpiW, address_out = 0x74dcd5cd |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = lstrcmpiA, address_out = 0x74db3e8e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = DeleteCriticalSection, address_out = 0x772145f5 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = ReleaseMutex, address_out = 0x74db111e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CloseHandle, address_out = 0x74db1410 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetVersion, address_out = 0x74db4467 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateThread, address_out = 0x74db34d5 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = ExpandEnvironmentStringsW, address_out = 0x74db4173 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = QueryPerformanceCounter, address_out = 0x74db1725 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = QueryPerformanceFrequency, address_out = 0x74db41f0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetCurrentProcessId, address_out = 0x74db11f8 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetFileAttributesW, address_out = 0x74dcd4f7 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetVolumeInformationW, address_out = 0x74dcc860 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WriteFile, address_out = 0x74db1282 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetFilePointerEx, address_out = 0x74dcc807 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetEndOfFile, address_out = 0x74dcce2e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FindFirstFileW, address_out = 0x74db4435 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetProcessHeap, address_out = 0x74db14e9 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = HeapReAlloc, address_out = 0x77221f6e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = HeapAlloc, address_out = 0x7720e026 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = HeapFree, address_out = 0x74db14c9 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreatePipe, address_out = 0x74e3415b |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetHandleInformation, address_out = 0x74dc195c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateProcessW, address_out = 0x74db103d |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CompareStringW, address_out = 0x74db3bca |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CompareStringA, address_out = 0x74db3c5a |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = OpenProcess, address_out = 0x74db1986 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = TerminateProcess, address_out = 0x74dcd802 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetSystemTime, address_out = 0x74db5a96 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SystemTimeToFileTime, address_out = 0x74db5a7e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetLastError, address_out = 0x74db11c0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateToolhelp32Snapshot, address_out = 0x74dd735f |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Process32NextW, address_out = 0x74dd896c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Process32FirstW, address_out = 0x74dd8baf |
|
1 | |
| Module | Load | module_name = advapi32.dll, base_address = 0x76cd0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = RegOpenKeyExW, address_out = 0x76ce468d |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = RegQueryValueExW, address_out = 0x76ce46ad |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = RegSetValueExW, address_out = 0x76ce14d6 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = RegCloseKey, address_out = 0x76ce469d |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = OpenProcessToken, address_out = 0x76ce4304 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = GetTokenInformation, address_out = 0x76ce431c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = OpenSCManagerW, address_out = 0x76cdca64 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = OpenServiceW, address_out = 0x76cdca4c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = CloseServiceHandle, address_out = 0x76ce369c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = ControlService, address_out = 0x76cf7144 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = QueryServiceStatus, address_out = 0x76ce2a86 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = EnumDependentServicesW, address_out = 0x76cd1e3a |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = EnumServicesStatusExW, address_out = 0x76cdb466 |
|
1 | |
| Module | Load | module_name = user32.dll, base_address = 0x75890000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\user32.dll, function = SystemParametersInfoW, address_out = 0x758a90d3 |
|
1 | |
| Module | Load | module_name = Shell32.dll, base_address = 0x75c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\shell32.dll, function = ShellExecuteExW, address_out = 0x75c41e46 |
|
1 | |
| Module | Load | module_name = ntdll.dll, base_address = 0x771e0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x771ffda0 |
|
1 | |
| Module | Load | module_name = mpr.dll, base_address = 0x72da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\mpr.dll, function = WNetCloseEnum, address_out = 0x72da2dd6 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\mpr.dll, function = WNetOpenEnumW, address_out = 0x72da2f06 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\mpr.dll, function = WNetEnumResourceW, address_out = 0x72da3058 |
|
1 | |
| Module | Load | module_name = ws2_32.dll, base_address = 0x75560000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = WSAStartup, address_out = 0x75563ab2 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = socket, address_out = 0x75563eb8 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = send, address_out = 0x75566f01 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = recv, address_out = 0x75566b0e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = connect, address_out = 0x75566bdd |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = closesocket, address_out = 0x75563918 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = gethostbyname, address_out = 0x75577673 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = inet_addr, address_out = 0x7556311b |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = ntohl, address_out = 0x75562d57 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = htonl, address_out = 0x75562d57 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = htons, address_out = 0x75562d8b |
|
1 | |
| System | Get Time | type = Performance Ctr, time = 7192806830 |
|
1 | |
| System | Get Time | type = Ticks, time = 28657 |
|
3 | |
| System | Get Info | type = Operating System |
|
1 | |
| Mutex | Open | mutex_name = Global\syncronize_WRZB2LA, desired_access = SYNCHRONIZE |
|
1 | |
| Mutex | Create | mutex_name = Global\syncronize_WRZB2LA |
|
1 | |
| Mutex | Open | mutex_name = Global\syncronize_WRZB2LU, desired_access = SYNCHRONIZE |
|
1 | |
| Mutex | Create | mutex_name = Global\syncronize_WRZB2LU |
|
1 | |
| System | Get Info | type = Operating System |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\agent1c.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\agent1c.exe, size = 32767 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x74dcd650 |
|
1 | |
| File | Create | filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\agent1c.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ |
|
1 | |
| File | Create | filename = C:\Windows\System32\agent1c.exe, desired_access = GENERIC_WRITE |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x74dcd650 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x74dcd650 |
|
1 | |
| File | Create | filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\agent1c.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ |
|
1 | |
| File | Create | filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\agent1c.exe, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\agent1c.exe, size = 1048576, size_out = 94720 |
|
1 | |
| File | Write | filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\agent1c.exe, size = 94720 |
|
1 | |
| File | Read | filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\agent1c.exe, size = 1048576, size_out = 0 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x74dcd650 |
|
1 | |
| Registry | Open Key | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run |
|
1 | |
| Registry | Write Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run, value_name = agent1c.exe, data = 5107288, size = 114, type = REG_SZ |
|
1 | |
| Registry | Open Key | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run |
|
1 | |
| Registry | Write Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run, value_name = agent1c.exe, data = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\agent1c.exe, size = 114, type = REG_SZ |
|
1 | |
| Registry | Open Key | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, value_name = Startup, data = 83, type = REG_NONE |
|
1 | |
| Registry | Open Key | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, value_name = Startup, data = %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup, type = REG_EXPAND_SZ |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x74dcd650 |
|
1 | |
| File | Create | filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\agent1c.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ |
|
1 | |
| File | Create | filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\agent1c.exe, desired_access = GENERIC_WRITE |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x74dcd650 |
|
1 | |
| Registry | Open Key | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, value_name = Common Startup, data = %ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup, type = REG_EXPAND_SZ |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x74dcd650 |
|
1 | |
| File | Create | filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\agent1c.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ |
|
1 | |
| File | Create | filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\agent1c.exe, desired_access = GENERIC_WRITE |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x74dcd650 |
|
1 | |
| File | Create Pipe | pipe_name = Anonymous read pipe, size = 0 |
|
1 | |
| File | Create Pipe | pipe_name = Anonymous read pipe, size = 0 |
|
1 | |
| Process | Create | process_name = C:\Windows\system32\cmd.exe, os_pid = 0x610, startup_flags = STARTF_USESHOWWINDOW, STARTF_USESTDHANDLES, show_window = SW_HIDE |
|
1 | |
| File | Write | size = 65 |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\agent1c.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\agent1c.exe, size = 32767 |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\agent1c.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\agent1c.exe, size = 32767 |
|
1 | |
| System | Sleep | duration = -1 (infinite) |
|
1 |
Thread 0x618
1411
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 |
Thread 0x61c
6
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x74dcd650 |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\agent1c.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\agent1c.exe, size = 32767 |
|
1 | |
| Process | Create | process_name = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\agent1c.exe, show_window = SW_SHOWNORMAL |
|
1 |
Thread 0x620
30
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| System | Get Computer Name | result_out = XDUWTFONO |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
38 |
Thread 0x624
52
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| System | Get Time | type = Ticks, time = 33228 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x74dcd650 |
|
1 | |
| System | Get Time | type = Ticks, time = 33446 |
|
1 | |
| System | Get Time | type = Ticks, time = 33602 |
|
1 | |
| System | Get Time | type = Ticks, time = 33821 |
|
1 | |
| System | Get Time | type = Ticks, time = 33992 |
|
1 | |
| System | Get Time | type = Ticks, time = 34211 |
|
1 | |
| System | Get Time | type = Ticks, time = 34445 |
|
2 | |
| System | Get Time | type = Ticks, time = 34725 |
|
1 | |
| System | Get Time | type = Ticks, time = 34944 |
|
1 | |
| System | Get Time | type = Ticks, time = 35334 |
|
1 | |
| System | Get Time | type = Ticks, time = 35677 |
|
2 | |
| System | Get Time | type = Ticks, time = 35927 |
|
1 | |
| System | Get Time | type = Ticks, time = 36473 |
|
1 | |
| System | Get Time | type = Ticks, time = 36691 |
|
2 | |
| System | Get Time | type = Ticks, time = 36847 |
|
1 | |
| System | Get Time | type = Ticks, time = 36987 |
|
1 | |
| System | Get Time | type = Ticks, time = 37097 |
|
1 | |
| System | Get Time | type = Ticks, time = 37393 |
|
1 | |
| System | Get Time | type = Ticks, time = 37689 |
|
1 | |
| System | Get Time | type = Ticks, time = 37877 |
|
2 | |
| System | Get Time | type = Ticks, time = 38111 |
|
1 | |
| System | Get Time | type = Ticks, time = 38267 |
|
1 | |
| System | Get Time | type = Ticks, time = 38454 |
|
1 | |
| System | Get Time | type = Ticks, time = 38906 |
|
2 | |
| System | Get Time | type = Ticks, time = 39156 |
|
1 | |
| System | Get Time | type = Ticks, time = 39390 |
|
1 | |
| System | Get Time | type = Ticks, time = 39515 |
|
1 | |
| System | Get Time | type = Ticks, time = 39671 |
|
1 | |
| System | Get Time | type = Ticks, time = 39780 |
|
1 | |
| System | Get Time | type = Ticks, time = 39920 |
|
2 | |
| System | Get Time | type = Ticks, time = 40045 |
|
1 | |
| System | Get Time | type = Ticks, time = 40295 |
|
1 | |
| System | Get Time | type = Ticks, time = 40575 |
|
1 | |
| System | Get Time | type = Ticks, time = 40778 |
|
1 | |
| System | Get Time | type = Ticks, time = 41480 |
|
2 | |
| System | Get Time | type = Ticks, time = 41699 |
|
1 | |
| System | Get Time | type = Ticks, time = 41948 |
|
1 | |
| System | Get Time | type = Ticks, time = 42385 |
|
1 | |
| System | Get Time | type = Ticks, time = 42603 |
|
2 | |
| System | Get Time | type = Ticks, time = 42884 |
|
1 |
Thread 0x680
2457
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x74dcd650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, type = size, size_out = 129 |
|
1 | |
| File | Get Info | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\BCD.LOG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\bootex.log, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\bootex.log, type = size, size_out = 5120 |
|
1 | |
| File | Get Info | filename = C:\bootex.log, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\bootex.log.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\bootex.log, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\bootex.log.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\bootex.log, size = 1048560, size_out = 5120 |
|
1 | |
| File | Write | filename = C:\bootex.log.id-9C354B42.[my0day@aol.com].0day, size = 5136 |
|
1 | |
| File | Read | filename = C:\bootex.log, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\bootex.log.id-9C354B42.[my0day@aol.com].0day, size = 232 |
|
1 | |
| File | Delete | filename = C:\bootex.log |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui, type = size, size_out = 89600 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, type = size, size_out = 197120 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\TabIpsps.dll, type = size, size_out = 224256 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, type = size, size_out = 222208 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi, type = size, size_out = 194048 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 1600388 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml, type = size, size_out = 1434 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml, type = size, size_out = 727 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf, type = size, size_out = 152300 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg, type = size, size_out = 3981 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg, type = size, size_out = 5115 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg, type = size, size_out = 14049 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm, type = size, size_out = 233 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.jpg, type = size, size_out = 1920 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.jpg.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg, type = size, size_out = 15776 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL, size = 1048560, size_out = 10146 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 10160 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, type = size, size_out = 1464 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, size = 1048560, size_out = 1464 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1472 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF, type = size, size_out = 4024 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF, size = 1048560, size_out = 4024 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 4032 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF, type = size, size_out = 1536 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF, size = 1048560, size_out = 1536 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1552 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF, type = size, size_out = 1736 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF, size = 1048560, size_out = 1736 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1744 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BABY_01.MID, type = size, size_out = 5272 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 5272 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 5280 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF, type = size, size_out = 3350 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF, size = 1048560, size_out = 3350 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3360 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF.id-9C354B42.[my0day@aol.com].0day, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF, type = size, size_out = 2378 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF, size = 1048560, size_out = 2378 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2384 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF, type = size, size_out = 1044 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF, size = 1048560, size_out = 1044 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID, size = 1056 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF, type = size, size_out = 2166 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF, size = 1048560, size_out = 2166 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2176 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF, type = size, size_out = 8366 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF, size = 1048560, size_out = 8366 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 8368 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF, type = size, size_out = 4976 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF, size = 1048560, size_out = 4976 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 4992 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF, type = size, size_out = 12788 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF, size = 1048560, size_out = 12788 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 12800 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF, type = size, size_out = 5580 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF, size = 1048560, size_out = 5580 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 5584 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF, type = size, size_out = 3524 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF, size = 1048560, size_out = 3524 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3536 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF, type = size, size_out = 2488 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF, size = 1048560, size_out = 2488 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2496 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF, type = size, size_out = 1676 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF, size = 1048560, size_out = 1676 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID, size = 1680 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF, type = size, size_out = 10538 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF, size = 1048560, size_out = 10538 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID, size = 10544 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF, type = size, size_out = 2422 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF, size = 1048560, size_out = 2422 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2432 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 10326 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF, size = 1048560, size_out = 10326 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF.id-9C354B42.[my0day@aol.com].0day, size = 10336 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF, type = size, size_out = 2832 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF, size = 1048560, size_out = 2832 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2848 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF, type = size, size_out = 37974 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF, size = 1048560, size_out = 37974 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 37984 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF, type = size, size_out = 40030 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF, size = 1048560, size_out = 40030 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 40032 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF, type = size, size_out = 2952 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF, size = 1048560, size_out = 2952 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2960 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF, type = size, size_out = 3616 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF, size = 1048560, size_out = 3616 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF, size = 3632 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF, type = size, size_out = 2404 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF, size = 1048560, size_out = 2404 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2416 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF, type = size, size_out = 1804 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF, size = 1048560, size_out = 1804 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1808 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF, type = size, size_out = 2024 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF, size = 1048560, size_out = 2024 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2032 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF, type = size, size_out = 2084 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF, size = 1048560, size_out = 2084 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2096 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF, type = size, size_out = 1448 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF, size = 1048560, size_out = 1448 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1456 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01182_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01182_.WMF, type = size, size_out = 2996 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01182_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01182_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01182_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01182_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01182_.WMF, size = 1048560, size_out = 2996 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01182_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3008 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01182_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01182_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01182_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF, type = size, size_out = 2296 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF, size = 1048560, size_out = 2296 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2304 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF, type = size, size_out = 8564 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF, size = 1048560, size_out = 8564 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 8576 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01366_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 |
Thread 0x684
52
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| System | Get Time | type = Ticks, time = 33306 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x74dcd650 |
|
1 | |
| System | Get Time | type = Ticks, time = 33446 |
|
1 | |
| System | Get Time | type = Ticks, time = 33602 |
|
1 | |
| System | Get Time | type = Ticks, time = 33821 |
|
1 | |
| System | Get Time | type = Ticks, time = 33992 |
|
1 | |
| System | Get Time | type = Ticks, time = 34211 |
|
1 | |
| System | Get Time | type = Ticks, time = 34445 |
|
2 | |
| System | Get Time | type = Ticks, time = 34725 |
|
1 | |
| System | Get Time | type = Ticks, time = 34944 |
|
1 | |
| System | Get Time | type = Ticks, time = 35334 |
|
1 | |
| System | Get Time | type = Ticks, time = 35677 |
|
2 | |
| System | Get Time | type = Ticks, time = 35927 |
|
1 | |
| System | Get Time | type = Ticks, time = 36473 |
|
1 | |
| System | Get Time | type = Ticks, time = 36691 |
|
2 | |
| System | Get Time | type = Ticks, time = 36847 |
|
1 | |
| System | Get Time | type = Ticks, time = 36987 |
|
1 | |
| System | Get Time | type = Ticks, time = 37097 |
|
1 | |
| System | Get Time | type = Ticks, time = 37393 |
|
1 | |
| System | Get Time | type = Ticks, time = 37689 |
|
1 | |
| System | Get Time | type = Ticks, time = 37877 |
|
2 | |
| System | Get Time | type = Ticks, time = 38111 |
|
1 | |
| System | Get Time | type = Ticks, time = 38267 |
|
1 | |
| System | Get Time | type = Ticks, time = 38454 |
|
1 | |
| System | Get Time | type = Ticks, time = 38906 |
|
2 | |
| System | Get Time | type = Ticks, time = 39171 |
|
1 | |
| System | Get Time | type = Ticks, time = 39390 |
|
1 | |
| System | Get Time | type = Ticks, time = 39515 |
|
1 | |
| System | Get Time | type = Ticks, time = 39671 |
|
1 | |
| System | Get Time | type = Ticks, time = 39780 |
|
1 | |
| System | Get Time | type = Ticks, time = 39920 |
|
2 | |
| System | Get Time | type = Ticks, time = 40045 |
|
1 | |
| System | Get Time | type = Ticks, time = 40295 |
|
1 | |
| System | Get Time | type = Ticks, time = 40575 |
|
1 | |
| System | Get Time | type = Ticks, time = 40778 |
|
1 | |
| System | Get Time | type = Ticks, time = 41480 |
|
2 | |
| System | Get Time | type = Ticks, time = 41699 |
|
1 | |
| System | Get Time | type = Ticks, time = 41948 |
|
1 | |
| System | Get Time | type = Ticks, time = 42385 |
|
1 | |
| System | Get Time | type = Ticks, time = 42603 |
|
2 | |
| System | Get Time | type = Ticks, time = 42884 |
|
1 |
Thread 0x688
1634
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x74dcd650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
2 | |
| File | Create | filename = C:\bootsqm.dat, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe, type = size, size_out = 3264 |
|
1 | |
| File | Get Info | filename = C:\bootsqm.dat, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\bootsqm.dat.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\bootsqm.dat, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\bootsqm.dat.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\bootsqm.dat, size = 1048560, size_out = 3264 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, size = 3280 |
|
1 | |
| File | Read | filename = C:\bootsqm.dat, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, size = 234 |
|
1 | |
| File | Delete | filename = C:\bootsqm.dat |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, type = size, size_out = 62976 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml, type = size, size_out = 212 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml, type = size, size_out = 384 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml, type = size, size_out = 471 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml, type = size, size_out = 215 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml, type = size, size_out = 1437 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground_PAL.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground_PAL.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground_PAL.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground_PAL.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, size = 1048560, size_out = 1696 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1712 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF, type = size, size_out = 8070 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF, size = 1048560, size_out = 8070 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 8080 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF, type = size, size_out = 9304 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF, size = 1048560, size_out = 9304 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 9312 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID, type = size, size_out = 2644 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF, size = 1048560, size_out = 2644 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2656 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF, type = size, size_out = 3016 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF, size = 1048560, size_out = 3016 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3024 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, type = size, size_out = 3780 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, size = 1048560, size_out = 3780 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3792 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF, type = size, size_out = 4164 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF, size = 1048560, size_out = 4164 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 4176 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 29004 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF, size = 1048560, size_out = 29004 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF.id-9C354B42.[my0day@aol.com].0day, size = 29008 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 1712 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID, size = 1048560, size_out = 1712 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1728 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF, type = size, size_out = 3796 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF, size = 1048560, size_out = 3796 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3808 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF, type = size, size_out = 1874 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF, size = 1048560, size_out = 1874 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1888 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 49546 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF, size = 1048560, size_out = 49546 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF.id-9C354B42.[my0day@aol.com].0day, size = 49552 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF, type = size, size_out = 31122 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF, size = 1048560, size_out = 31122 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 31136 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF, type = size, size_out = 8256 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF, size = 1048560, size_out = 8256 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 8272 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF, type = size, size_out = 42908 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF, size = 1048560, size_out = 42908 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 42912 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF, type = size, size_out = 9992 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF, size = 1048560, size_out = 9992 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 10000 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF, type = size, size_out = 20784 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF, size = 1048560, size_out = 20784 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 20800 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF, type = size, size_out = 24588 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF, size = 1048560, size_out = 24588 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 24592 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx, type = size, size_out = 2300 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF, size = 1048560, size_out = 2300 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2304 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx, type = size, size_out = 2080 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF, size = 1048560, size_out = 2080 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2096 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF, type = size, size_out = 2004 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF, size = 1048560, size_out = 2004 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2016 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF, type = size, size_out = 2020 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF, size = 1048560, size_out = 2020 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2032 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01172_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01172_.WMF, type = size, size_out = 2232 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01172_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01172_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01172_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01172_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01172_.WMF, size = 1048560, size_out = 2232 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01172_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2240 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01172_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01172_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01172_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF, type = size, size_out = 2324 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF, size = 1048560, size_out = 2324 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2336 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF, type = size, size_out = 4148 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF, size = 1048560, size_out = 4148 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF, size = 4160 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF, type = size, size_out = 1382 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF, size = 1048560, size_out = 1382 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1392 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00172_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 |
Thread 0x68c
2224
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x74dcd650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, type = size, size_out = 791686 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml, type = size, size_out = 31744 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml, type = size, size_out = 392 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml, type = size, size_out = 1218 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml, type = size, size_out = 209 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg, type = size, size_out = 2209 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Month_Calendar.emf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Month_Calendar.emf, type = size, size_out = 4192 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Month_Calendar.emf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Month_Calendar.emf.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Month_Calendar.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf, type = size, size_out = 26036 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 18304 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 1516 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1520 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF, type = size, size_out = 14444 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF, size = 1048560, size_out = 14444 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 14448 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF, type = size, size_out = 2556 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF, size = 1048560, size_out = 2556 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2560 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF, type = size, size_out = 5752 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF, size = 1048560, size_out = 5752 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 5760 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF, type = size, size_out = 27050 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF, size = 1048560, size_out = 27050 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 27056 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF, type = size, size_out = 6996 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF, size = 1048560, size_out = 6996 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 7008 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF, type = size, size_out = 9590 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 9590 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID, size = 9600 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF, type = size, size_out = 1330 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF, size = 1048560, size_out = 1330 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1344 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF, type = size, size_out = 1444 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF, size = 1048560, size_out = 1444 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1456 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF, type = size, size_out = 7974 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF, size = 1048560, size_out = 7974 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 7984 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF, type = size, size_out = 3104 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF, size = 1048560, size_out = 3104 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3120 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF, type = size, size_out = 1588 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF, size = 1048560, size_out = 1588 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1600 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF, type = size, size_out = 1212 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF, size = 1048560, size_out = 1212 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1216 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 2436 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF, size = 1048560, size_out = 2436 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2448 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF, type = size, size_out = 2732 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF, size = 1048560, size_out = 2732 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2736 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF, type = size, size_out = 7176 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF, size = 1048560, size_out = 7176 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 7184 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF, type = size, size_out = 14996 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF, size = 1048560, size_out = 14996 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 15008 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF, type = size, size_out = 3564 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF, size = 1048560, size_out = 3564 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3568 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF.id-9C354B42.[my0day@aol.com].0day, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF, type = size, size_out = 2262 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF, size = 1048560, size_out = 2262 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2272 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF, type = size, size_out = 2262 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF, size = 1048560, size_out = 2262 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2272 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF.id-9C354B42.[my0day@aol.com].0day, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF, type = size, size_out = 2690 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF, size = 1048560, size_out = 2690 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2704 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF, type = size, size_out = 17584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF, size = 1048560, size_out = 17584 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 17600 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF, type = size, size_out = 7828 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF, size = 1048560, size_out = 7828 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 7840 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF, type = size, size_out = 42992 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF, size = 1048560, size_out = 42992 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 43008 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF, type = size, size_out = 2226 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF, size = 1048560, size_out = 2226 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2240 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF, type = size, size_out = 3692 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF, size = 1048560, size_out = 3692 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3696 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF, type = size, size_out = 3632 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF, size = 1048560, size_out = 3632 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3648 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01143_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01143_.WMF, type = size, size_out = 2140 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01143_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01143_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01143_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01143_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01143_.WMF, size = 1048560, size_out = 2140 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01143_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2144 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01143_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01143_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01143_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF, type = size, size_out = 2780 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF, size = 1048560, size_out = 2780 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2784 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF, type = size, size_out = 2796 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF, size = 1048560, size_out = 2796 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2800 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF, type = size, size_out = 2960 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF, size = 1048560, size_out = 2960 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2976 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF, type = size, size_out = 2960 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF, size = 1048560, size_out = 2960 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2976 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF, type = size, size_out = 3588 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF, size = 1048560, size_out = 3588 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3600 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01162_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01162_.WMF, type = size, size_out = 2300 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01162_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01162_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01162_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01162_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01162_.WMF, size = 1048560, size_out = 2300 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01162_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2304 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01162_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01162_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01162_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx, type = size, size_out = 2080 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF, size = 1048560, size_out = 2080 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2096 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF, type = size, size_out = 900 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF, size = 1048560, size_out = 900 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 912 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF, type = size, size_out = 19068 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF, size = 1048560, size_out = 19068 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 19072 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01772_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 |
Thread 0x690
1971
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x74dcd650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, type = size, size_out = 27045 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml, type = size, size_out = 33280 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml, type = size, size_out = 1118 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml, type = size, size_out = 3150 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml, type = size, size_out = 247 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml, type = size, size_out = 3161 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml, type = size, size_out = 3166 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml, type = size, size_out = 738 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | size = 1048560, size_out = 3986 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 4000 |
|
1 | |
| File | Read | size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF, type = size, size_out = 4708 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF, size = 1048560, size_out = 4708 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 4720 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF, type = size, size_out = 12482 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 12482 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 12496 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF, type = size, size_out = 812 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF, size = 1048560, size_out = 812 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 816 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF, type = size, size_out = 13102 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF, size = 1048560, size_out = 13102 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 13104 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF, type = size, size_out = 27552 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF, size = 1048560, size_out = 27552 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 27568 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF, type = size, size_out = 11500 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF, size = 1048560, size_out = 11500 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 11504 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF, type = size, size_out = 4408 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF, size = 1048560, size_out = 4408 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 4416 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF, type = size, size_out = 6256 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF, size = 1048560, size_out = 6256 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 6272 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF, type = size, size_out = 19476 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF, size = 1048560, size_out = 19476 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 19488 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF, type = size, size_out = 3768 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF, size = 1048560, size_out = 3768 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3776 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF, type = size, size_out = 2052 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF, size = 1048560, size_out = 2052 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2064 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID, type = size, size_out = 3896 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF, size = 1048560, size_out = 3896 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3904 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF, type = size, size_out = 3494 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF, size = 1048560, size_out = 3494 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3504 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF, type = size, size_out = 3948 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF, size = 1048560, size_out = 3948 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3952 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF, type = size, size_out = 4236 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF, size = 1048560, size_out = 4236 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 4240 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 5270 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF, size = 1048560, size_out = 5270 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF.id-9C354B42.[my0day@aol.com].0day, size = 5280 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF, type = size, size_out = 2966 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF, size = 1048560, size_out = 2966 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2976 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF.id-9C354B42.[my0day@aol.com].0day, size = 226 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF, type = size, size_out = 29628 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF, size = 1048560, size_out = 29628 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 29632 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF, type = size, size_out = 792 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF, size = 1048560, size_out = 792 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx.id-9C354B42.[my0day@aol.com].0day, size = 800 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF, type = size, size_out = 712 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF, size = 1048560, size_out = 712 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 720 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF, type = size, size_out = 1932 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF, size = 1048560, size_out = 1932 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx, size = 1936 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF, type = size, size_out = 14820 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF, size = 1048560, size_out = 14820 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 14832 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF, type = size, size_out = 2228 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF, size = 1048560, size_out = 2228 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2240 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF, type = size, size_out = 2052 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF, size = 1048560, size_out = 2052 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2064 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF, type = size, size_out = 1888 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF, size = 1048560, size_out = 1888 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1904 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF, type = size, size_out = 3796 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF, size = 1048560, size_out = 3796 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3808 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF, type = size, size_out = 2524 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF, size = 1048560, size_out = 2524 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 2528 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF, type = size, size_out = 580 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF, size = 1048560, size_out = 580 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 592 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF, type = size, size_out = 296 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF, size = 1048560, size_out = 296 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 304 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF, type = size, size_out = 552 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF, size = 1048560, size_out = 552 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 560 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF, type = size, size_out = 3252 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF, size = 1048560, size_out = 3252 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 3264 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF, type = size, size_out = 13042 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF, size = 1048560, size_out = 13042 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 13056 |
|
1 |
Thread 0x698
249
0
| Category | Operation | Information | Success | Count | Logfile |
|---|
Thread 0x69c
1494
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x74dcd650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
2 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe, type = size, size_out = 193024 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, type = size, size_out = 8704 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL, type = size, size_out = 7379816 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll, type = size, size_out = 15736 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe, type = size, size_out = 1377144 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL, type = size, size_out = 19848 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL, type = size, size_out = 18336 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL, type = size, size_out = 752552 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\Ole DB\msxactps.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\Ole DB\msxactps.dll, type = size, size_out = 36864 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\Ole DB\msxactps.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\Ole DB\msxactps.dll.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\Ole DB\msxactps.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CARBN_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CARBN_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CARBN_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CARBN_01.MID, size = 1048560, size_out = 9322 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF, size = 9328 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CARBN_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CARBN_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID, type = size, size_out = 9318 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID, size = 1048560, size_out = 9318 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID.id-9C354B42.[my0day@aol.com].0day, size = 9328 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID, type = size, size_out = 6491 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID, size = 1048560, size_out = 6491 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 6496 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID, type = size, size_out = 5714 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID, size = 1048560, size_out = 5714 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID.id-9C354B42.[my0day@aol.com].0day, size = 5728 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID, type = size, size_out = 8538 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID, size = 1048560, size_out = 8538 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID.id-9C354B42.[my0day@aol.com].0day, size = 8544 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 7768 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID, size = 1048560, size_out = 7768 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID.id-9C354B42.[my0day@aol.com].0day, size = 7776 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID, type = size, size_out = 10122 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID, size = 1048560, size_out = 10122 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 10128 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID, type = size, size_out = 5058 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID, size = 1048560, size_out = 5058 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID.id-9C354B42.[my0day@aol.com].0day, size = 5072 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID, type = size, size_out = 4961 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID, size = 1048560, size_out = 4961 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 4976 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 49025 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 49025 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx.id-9C354B42.[my0day@aol.com].0day, size = 49040 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF.id-9C354B42.[my0day@aol.com].0day, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx.id-9C354B42.[my0day@aol.com].0day, size = 242 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx, type = size, size_out = 26989 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx, size = 1048560, size_out = 26989 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx.id-9C354B42.[my0day@aol.com].0day, size = 26992 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Couture.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Couture.eftx, type = size, size_out = 1967905 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Couture.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Couture.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Couture.eftx, destination_filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Couture.eftx.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx, type = size, size_out = 314017 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx, size = 1048560, size_out = 314017 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx.id-9C354B42.[my0day@aol.com].0day, size = 314032 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx.id-9C354B42.[my0day@aol.com].0day, size = 240 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx, type = size, size_out = 21156 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx, size = 1048560, size_out = 21156 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx.id-9C354B42.[my0day@aol.com].0day, size = 21168 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx.id-9C354B42.[my0day@aol.com].0day, size = 240 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx, type = size, size_out = 211090 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx, size = 1048560, size_out = 211090 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx.id-9C354B42.[my0day@aol.com].0day, size = 211104 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx, type = size, size_out = 32857 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx, size = 1048560, size_out = 32857 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx.id-9C354B42.[my0day@aol.com].0day, size = 32864 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx, type = size, size_out = 40941 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx, size = 1048560, size_out = 40941 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx.id-9C354B42.[my0day@aol.com].0day, size = 40944 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx, type = size, size_out = 27789 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx, size = 1048560, size_out = 27789 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx.id-9C354B42.[my0day@aol.com].0day, size = 27792 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx.id-9C354B42.[my0day@aol.com].0day, size = 242 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx, type = size, size_out = 19611 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx, size = 1048560, size_out = 19611 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx.id-9C354B42.[my0day@aol.com].0day, size = 19616 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx.id-9C354B42.[my0day@aol.com].0day, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx, type = size, size_out = 31224 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx, size = 1048560, size_out = 31224 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx.id-9C354B42.[my0day@aol.com].0day, size = 31232 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx.id-9C354B42.[my0day@aol.com].0day, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML, type = size, size_out = 312376 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML, size = 1048560, size_out = 312376 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 312384 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC, type = size, size_out = 495616 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC, size = 1048560, size_out = 495616 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC.id-9C354B42.[my0day@aol.com].0day, size = 495632 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 |
Thread 0x6a0
1403
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x74dcd650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
2 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, type = size, size_out = 4096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, type = size, size_out = 4096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui, type = size, size_out = 2560 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui, type = size, size_out = 22528 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui, type = size, size_out = 2560 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, type = size, size_out = 8704 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\TabIpsps.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\TabIpsps.dll, type = size, size_out = 40448 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\TabIpsps.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\TabIpsps.dll.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\TabIpsps.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PRJRES.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PRJRES.DLL.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ARFR\MSB1ARFR.ITS, destination_filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ARFR\MSB1ARFR.ITS.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1AR.LEX, destination_filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1AR.LEX.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\VBE7.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\VBE7.DLL.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\FPSRVUTL.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\FPSRVUTL.DLL.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BABY_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BABY_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BABY_01.MID, size = 1048560, size_out = 7384 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 7392 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BABY_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BABY_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID, type = size, size_out = 5843 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID, size = 1048560, size_out = 5843 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 5856 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID, type = size, size_out = 5968 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF, size = 1048560, size_out = 5968 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 5984 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF, type = size, size_out = 6020 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF, size = 1048560, size_out = 6020 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID.id-9C354B42.[my0day@aol.com].0day, size = 6032 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID, type = size, size_out = 6392 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID, size = 1048560, size_out = 6392 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 6400 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID, type = size, size_out = 13358 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID, size = 1048560, size_out = 13358 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 13360 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx, type = size, size_out = 218310 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx, size = 1048560, size_out = 218310 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx.id-9C354B42.[my0day@aol.com].0day, size = 218320 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Couture.eftx, type = size, size_out = 22417 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx, size = 1048560, size_out = 22417 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx.id-9C354B42.[my0day@aol.com].0day, size = 22432 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx.id-9C354B42.[my0day@aol.com].0day, size = 240 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx, type = size, size_out = 24611 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx, size = 1048560, size_out = 24611 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx.id-9C354B42.[my0day@aol.com].0day, size = 24624 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx, type = size, size_out = 16350 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx, size = 1048560, size_out = 16350 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx, size = 16352 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx, size = 240 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx, type = size, size_out = 18226 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx, size = 1048560, size_out = 18226 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx.id-9C354B42.[my0day@aol.com].0day, size = 18240 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx, type = size, size_out = 350689 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx, size = 1048560, size_out = 350689 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx.id-9C354B42.[my0day@aol.com].0day, size = 350704 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx.id-9C354B42.[my0day@aol.com].0day, size = 240 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx, type = size, size_out = 43357 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx, size = 1048560, size_out = 43357 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx.id-9C354B42.[my0day@aol.com].0day, size = 43360 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx, type = size, size_out = 43193 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx, size = 1048560, size_out = 43193 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx.id-9C354B42.[my0day@aol.com].0day, size = 43200 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx.id-9C354B42.[my0day@aol.com].0day, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx, type = size, size_out = 228746 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx, size = 1048560, size_out = 228746 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx.id-9C354B42.[my0day@aol.com].0day, size = 228752 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx.id-9C354B42.[my0day@aol.com].0day, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx, type = size, size_out = 23692 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx, size = 1048560, size_out = 23692 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx.id-9C354B42.[my0day@aol.com].0day, size = 23696 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx, type = size, size_out = 41295 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx, size = 1048560, size_out = 41295 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx.id-9C354B42.[my0day@aol.com].0day, size = 41296 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx, type = size, size_out = 129924 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx, size = 1048560, size_out = 129924 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx.id-9C354B42.[my0day@aol.com].0day, size = 129936 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.DLL, type = size, size_out = 15776 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW, type = size, size_out = 394200 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW, size = 1048560, size_out = 394200 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML.id-9C354B42.[my0day@aol.com].0day, size = 394208 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\AUTOSHAP.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\AUTOSHAP.DLL, type = size, size_out = 15776 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\AUTOSHAP.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\AUTOSHAP.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\AUTOSHAP.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\LINES.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\LINES.DLL, type = size, size_out = 15256 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\LINES.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\LINES.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\LINES.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCOLKI.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 |
Thread 0x6a4
1709
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x74dcd650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
2 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, type = size, size_out = 4096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui, type = size, size_out = 9216 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui, type = size, size_out = 10240 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui, type = size, size_out = 2560 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui, type = size, size_out = 2560 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui, type = size, size_out = 43520 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | size = 1048560, size_out = 14872 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll.id-9C354B42.[my0day@aol.com].0day, size = 14880 |
|
1 | |
| File | Read | size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll.id-9C354B42.[my0day@aol.com].0day, size = 238 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 6970 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID, size = 1048560, size_out = 6970 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 6976 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID, type = size, size_out = 10562 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID, size = 1048560, size_out = 10562 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 10576 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 4846 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID, size = 1048560, size_out = 4846 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 4848 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID, type = size, size_out = 12981 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID, size = 1048560, size_out = 12981 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 12992 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID, type = size, size_out = 6331 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID, size = 1048560, size_out = 6331 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 6336 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID, type = size, size_out = 7178 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID, size = 1048560, size_out = 7178 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 7184 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID, type = size, size_out = 8568 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID, size = 1048560, size_out = 8568 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 8576 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID, type = size, size_out = 9797 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID, size = 1048560, size_out = 9797 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 9808 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 6880 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID, size = 1048560, size_out = 6880 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 6896 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID, type = size, size_out = 5440 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID, size = 1048560, size_out = 5440 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 5456 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID, type = size, size_out = 6644 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID, size = 1048560, size_out = 6644 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF, size = 6656 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID, type = size, size_out = 6070 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID, size = 1048560, size_out = 6070 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID.id-9C354B42.[my0day@aol.com].0day, size = 6080 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID, type = size, size_out = 7347 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID, size = 1048560, size_out = 7347 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID.id-9C354B42.[my0day@aol.com].0day, size = 7360 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID, type = size, size_out = 6764 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID, size = 1048560, size_out = 6764 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID.id-9C354B42.[my0day@aol.com].0day, size = 6768 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID, type = size, size_out = 6700 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID, size = 1048560, size_out = 6700 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 6704 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID, type = size, size_out = 8501 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID, size = 1048560, size_out = 8501 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 8512 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx, type = size, size_out = 27365 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx, size = 1048560, size_out = 27365 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx, size = 27376 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx, type = size, size_out = 22554 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx, size = 1048560, size_out = 22554 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx.id-9C354B42.[my0day@aol.com].0day, size = 22560 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx, type = size, size_out = 618119 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx, size = 1048560, size_out = 618119 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx.id-9C354B42.[my0day@aol.com].0day, size = 618128 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx.id-9C354B42.[my0day@aol.com].0day, size = 240 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx, type = size, size_out = 26648 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx, size = 1048560, size_out = 26648 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx.id-9C354B42.[my0day@aol.com].0day, size = 26656 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx, type = size, size_out = 18639 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx, size = 1048560, size_out = 18639 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx.id-9C354B42.[my0day@aol.com].0day, size = 18640 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx.id-9C354B42.[my0day@aol.com].0day, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx, type = size, size_out = 39546 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx, size = 1048560, size_out = 39546 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx.id-9C354B42.[my0day@aol.com].0day, size = 39552 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx, type = size, size_out = 582401 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx, size = 1048560, size_out = 582401 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx.id-9C354B42.[my0day@aol.com].0day, size = 582416 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx.id-9C354B42.[my0day@aol.com].0day, size = 240 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx, type = size, size_out = 27781 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx, size = 1048560, size_out = 27781 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx.id-9C354B42.[my0day@aol.com].0day, size = 27792 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx.id-9C354B42.[my0day@aol.com].0day, size = 238 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx, type = size, size_out = 112504 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx, size = 1048560, size_out = 112504 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01172_.WMF, size = 112512 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01172_.WMF, size = 238 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW, type = size, size_out = 492624 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW, size = 1048560, size_out = 492624 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW.id-9C354B42.[my0day@aol.com].0day, size = 492640 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCDDSUI.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCDDSUI.DLL, type = size, size_out = 21424 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCDDSUI.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCDDSUI.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCDDSUI.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Office14\1033\AECUTILS.VSL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 |
Thread 0x6a8
1474
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x74da0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x74dcd650 |
|
1 | |
| File | Create | filename = C:\Boot\BCD, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\BCD.LOG1, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\BCD.LOG1, type = size, size_out = 0 |
|
1 | |
| File | Create | filename = C:\Boot\BCD.LOG2, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\BCD.LOG2, type = size, size_out = 0 |
|
1 | |
| File | Create | filename = C:\Boot\cs-CZ\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\cs-CZ\bootmgr.exe.mui, type = size, size_out = 89168 |
|
1 | |
| File | Get Info | filename = C:\Boot\cs-CZ\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\cs-CZ\bootmgr.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\cs-CZ\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\da-DK\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\da-DK\bootmgr.exe.mui, type = size, size_out = 87616 |
|
1 | |
| File | Get Info | filename = C:\Boot\da-DK\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\da-DK\bootmgr.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\da-DK\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\de-DE\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\de-DE\bootmgr.exe.mui, type = size, size_out = 91712 |
|
1 | |
| File | Get Info | filename = C:\Boot\de-DE\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\de-DE\bootmgr.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\de-DE\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\el-GR\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\el-GR\bootmgr.exe.mui, type = size, size_out = 94800 |
|
1 | |
| File | Get Info | filename = C:\Boot\el-GR\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\el-GR\bootmgr.exe.mui.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\el-GR\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Move | source_filename = C:\Boot\Fonts\chs_boot.ttf, destination_filename = C:\Boot\Fonts\chs_boot.ttf.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Boot\Fonts\cht_boot.ttf, destination_filename = C:\Boot\Fonts\cht_boot.ttf.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Boot\Fonts\jpn_boot.ttf, destination_filename = C:\Boot\Fonts\jpn_boot.ttf.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Boot\Fonts\kor_boot.ttf, destination_filename = C:\Boot\Fonts\kor_boot.ttf.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\DVDMaker.exe, destination_filename = C:\Program Files\DVD Maker\DVDMaker.exe.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\OmdBase.dll, destination_filename = C:\Program Files\DVD Maker\OmdBase.dll.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\OmdProject.dll, destination_filename = C:\Program Files\DVD Maker\OmdProject.dll.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\Pipeline.dll, destination_filename = C:\Program Files\DVD Maker\Pipeline.dll.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\DVD Maker\PipeTran.dll, destination_filename = C:\Program Files\DVD Maker\PipeTran.dll.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msmdlocal.dll, destination_filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msmdlocal.dll.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msmgdsrv.dll, destination_filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msmgdsrv.dll.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Move | source_filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msolap100.dll, destination_filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msolap100.dll.id-9C354B42.[my0day@aol.com].0day |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\System\Ole DB\msxactps.dll, size = 1048560, size_out = 666456 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll.id-9C354B42.[my0day@aol.com].0day, size = 666464 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\System\Ole DB\msxactps.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF, type = size, size_out = 6165 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID, size = 1048560, size_out = 6165 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID, size = 6176 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID, type = size, size_out = 7567 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID, size = 1048560, size_out = 7567 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 7568 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 6763 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID, size = 1048560, size_out = 6763 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 6768 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 6564 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID, size = 1048560, size_out = 6564 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID.id-9C354B42.[my0day@aol.com].0day, size = 6576 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID, type = size, size_out = 5393 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID, size = 1048560, size_out = 5393 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID.id-9C354B42.[my0day@aol.com].0day, size = 5408 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID, type = size, size_out = 5983 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID, size = 1048560, size_out = 5983 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 5984 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID, type = size, size_out = 4219 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID, size = 1048560, size_out = 4219 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 4224 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID, type = size, size_out = 14044 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID, size = 1048560, size_out = 14044 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 14048 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID, type = size, size_out = 6915 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID, size = 1048560, size_out = 6915 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 6928 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\discipline-netherlands-sail.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\discipline-netherlands-sail.exe, type = size, size_out = 75776 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\discipline-netherlands-sail.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\discipline-netherlands-sail.exe.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\discipline-netherlands-sail.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 21089 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx, size = 1048560, size_out = 21089 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF, size = 21104 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF, size = 240 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx, type = size, size_out = 42917 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx, size = 1048560, size_out = 42917 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 42928 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF.id-9C354B42.[my0day@aol.com].0day, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx, type = size, size_out = 32818 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx, size = 1048560, size_out = 32818 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx.id-9C354B42.[my0day@aol.com].0day, size = 32832 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx, type = size, size_out = 533988 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx, size = 1048560, size_out = 533988 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx.id-9C354B42.[my0day@aol.com].0day, size = 534000 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx.id-9C354B42.[my0day@aol.com].0day, size = 240 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF.id-9C354B42.[my0day@aol.com].0day, type = size, size_out = 24117 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx, size = 1048560, size_out = 24117 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx.id-9C354B42.[my0day@aol.com].0day, size = 24128 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx.id-9C354B42.[my0day@aol.com].0day, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx, type = size, size_out = 21423 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx, size = 1048560, size_out = 21423 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx.id-9C354B42.[my0day@aol.com].0day, size = 21424 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx.id-9C354B42.[my0day@aol.com].0day, size = 244 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx, type = size, size_out = 782121 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx, size = 1048560, size_out = 782121 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx.id-9C354B42.[my0day@aol.com].0day, size = 782128 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML, type = size, size_out = 312400 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML, size = 1048560, size_out = 312400 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML.id-9C354B42.[my0day@aol.com].0day, size = 312416 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML.id-9C354B42.[my0day@aol.com].0day, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BULLETS.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BULLETS.DLL, type = size, size_out = 15264 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BULLETS.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BULLETS.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BULLETS.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW, type = size, size_out = 15776 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCVDTUI.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF, type = size, size_out = 158600 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCVDTUI.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCVDTUI.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Office14\1033\ACCVDTUI.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Office14\1033\ACTIP10.HLP, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Office14\1033\ACTIP10.HLP, type = size, size_out = 343520 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Office14\1033\ACTIP10.HLP, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Office14\1033\ACTIP10.HLP.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Office14\1033\ACTIP10.HLP, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Office14\1033\ACWIZRC.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Office14\1033\ACWIZRC.DLL, type = size, size_out = 275856 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Office14\1033\ACWIZRC.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Office14\1033\ACWIZRC.DLL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Office14\1033\ACWIZRC.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL, type = size, size_out = 69496 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL.id-9C354B42.[my0day@aol.com].0day, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL.id-9C354B42.[my0day@aol.com].0day, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL, size = 1048560, size_out = 69496 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL.id-9C354B42.[my0day@aol.com].0day, size = 69504 |
|
1 |
Thread 0x6ac
996
0
| Category | Operation | Information | Success | Count | Logfile |
|---|
Process #9: cmd.exe
281
0
| Information | Value |
|---|---|
| ID | #9 |
| File Name | c:\windows\system32\cmd.exe |
| Command Line | "C:\Windows\system32\cmd.exe" |
| Initial Working Directory | C:\Windows\system32\ |
| Monitor | Start Time: 00:04:21, Reason: Child Process |
| Unmonitor | End Time: 00:04:28, Reason: Self Terminated |
| Monitor Duration | 00:00:07 |
OS Process Information
| Information | Value |
|---|---|
| PID | 0x610 |
| Parent PID | 0x4f0 (c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\agent1c.exe) |
| Bitness | 64-bit |
| Is Created or Modified Executable |
|
| Integrity Level | Medium |
| Username | XDUWTFONO\5p5NrGJn0jS HALPmcxz |
| Enabled Privileges | SeChangeNotifyPrivilege |
| Thread IDs |
0x
614
|
Threads
Thread 0x614
281
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| System | Get Time | type = System Time, time = 2019-06-16 15:59:28 (UTC) |
|
1 | |
| System | Get Time | type = Ticks, time = 31652 |
|
1 | |
| System | Get Time | type = Performance Ctr, time = 7492307793 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\system32\cmd.exe, base_address = 0x4a160000 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\system32\kernel32.dll, base_address = 0x76ee0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\system32\kernel32.dll, function = SetThreadUILanguage, address_out = 0x76ef6d40 |
|
1 | |
| Registry | Open Key | reg_name = HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
2 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| Environment | Get Environment String | - |
|
2 | |
| Registry | Open Key | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DisableUNCCheck, data = 24, type = REG_NONE |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DelayedExpansion, data = 1, type = REG_NONE |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = CompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = PathCompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = AutoRun, data = 64, type = REG_NONE |
|
1 | |
| Registry | Open Key | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DisableUNCCheck, data = 64, type = REG_NONE |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DelayedExpansion, data = 1, type = REG_NONE |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = CompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = PathCompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = AutoRun, data = 9, type = REG_NONE |
|
1 | |
| Module | Get Filename | process_name = c:\windows\system32\cmd.exe, file_name_orig = C:\Windows\system32\cmd.exe, size = 260 |
|
1 | |
| Environment | Get Environment String | name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ |
|
1 | |
| Environment | Get Environment String | name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC |
|
1 | |
| Environment | Get Environment String | name = PROMPT |
|
1 | |
| Environment | Set Environment String | name = PROMPT, value = $P$G |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Environment | Get Environment String | name = COMSPEC, result_out = C:\Windows\system32\cmd.exe |
|
1 | |
| Environment | Get Environment String | name = KEYS |
|
1 | |
| File | Get Info | filename = C:\Windows\system32, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Windows\System32, type = file_attributes |
|
1 | |
| Environment | Set Environment String | name = =C:, value = C:\Windows\System32 |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| System | Get Info | type = Operating System |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 36 |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 2 |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 63 |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 2 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\system32\kernel32.dll, base_address = 0x76ee0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\system32\kernel32.dll, function = CopyFileExW, address_out = 0x76ef23d0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\system32\kernel32.dll, function = IsDebuggerPresent, address_out = 0x76ee8290 |
|
1 | |
| Module | Get Address | module_name = c:\windows\system32\kernel32.dll, function = SetConsoleInputExeNameW, address_out = 0x76ef17e0 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_INPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 2 |
|
1 | |
| Environment | Get Environment String | name = PROMPT, result_out = $P$G |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 20 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_INPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_INPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 24 |
|
1 | |
| Environment | Get Environment String | name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ |
|
1 | |
| Environment | Get Environment String | name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC |
|
1 | |
| Process | Create | process_name = C:\Windows\system32\mode.com, os_pid = 0x660, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL |
|
1 | |
| Environment | Set Environment String | name = COPYCMD |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Module | Load | module_name = NTDLL.DLL, base_address = 0x77000000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\system32\ntdll.dll, function = NtQueryInformationProcess, address_out = 0x770514a0 |
|
1 | |
| Process | Get Info | type = PROCESS_BASIC_INFORMATION |
|
1 | |
| Memory | Read | process_name = C:\Windows\system32\mode.com, address = 8796092887040, size = 896 |
|
1 | |
| Environment | Set Environment String | name = =ExitCode, value = 00000000 |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Environment | Set Environment String | name = =ExitCodeAscii |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
2 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 2 |
|
1 | |
| Environment | Get Environment String | name = PROMPT, result_out = $P$G |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 20 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_INPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_INPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 36 |
|
1 | |
| Environment | Get Environment String | name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ |
|
1 | |
| Environment | Get Environment String | name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC |
|
1 | |
| Process | Create | process_name = C:\Windows\system32\vssadmin.exe, os_pid = 0x670, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL |
|
1 | |
| Environment | Set Environment String | name = COPYCMD |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Process | Get Info | type = PROCESS_BASIC_INFORMATION |
|
1 | |
| Memory | Read | process_name = C:\Windows\system32\vssadmin.exe, address = 8796092854272, size = 896 |
|
1 | |
| Environment | Set Environment String | name = =ExitCode, value = 00000002 |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Environment | Set Environment String | name = =ExitCodeAscii |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
2 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 2 |
|
1 | |
| Environment | Get Environment String | name = PROMPT, result_out = $P$G |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 20 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_INPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_INPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 5 |
|
1 |
Process #10: mode.com
0
0
| Information | Value |
|---|---|
| ID | #10 |
| File Name | c:\windows\system32\mode.com |
| Command Line | mode con cp select=1251 |
| Initial Working Directory | C:\Windows\system32\ |
| Monitor | Start Time: 00:04:23, Reason: Child Process |
| Unmonitor | End Time: 00:04:25, Reason: Self Terminated |
| Monitor Duration | 00:00:02 |
| Remark | No high level activity detected in monitored regions |
OS Process Information
| Information | Value |
|---|---|
| PID | 0x660 |
| Parent PID | 0x610 (c:\windows\system32\cmd.exe) |
| Bitness | 64-bit |
| Is Created or Modified Executable |
|
| Integrity Level | Medium |
| Username | XDUWTFONO\5p5NrGJn0jS HALPmcxz |
| Enabled Privileges | SeChangeNotifyPrivilege |
| Thread IDs |
0x
664
|
Process #11: vssadmin.exe
0
0
| Information | Value |
|---|---|
| ID | #11 |
| File Name | c:\windows\system32\vssadmin.exe |
| Command Line | vssadmin delete shadows /all /quiet |
| Initial Working Directory | C:\Windows\system32\ |
| Monitor | Start Time: 00:04:24, Reason: Child Process |
| Unmonitor | End Time: 00:04:28, Reason: Self Terminated |
| Monitor Duration | 00:00:03 |
| Remark | No high level activity detected in monitored regions |
OS Process Information
| Information | Value |
|---|---|
| PID | 0x670 |
| Parent PID | 0x610 (c:\windows\system32\cmd.exe) |
| Bitness | 64-bit |
| Is Created or Modified Executable |
|
| Integrity Level | Medium |
| Username | XDUWTFONO\5p5NrGJn0jS HALPmcxz |
| Enabled Privileges | SeChangeNotifyPrivilege |
| Thread IDs |
0x
674
0x
694
0x
6B4
0x
6C0
0x
6C4
|
