e824650b...1486 | Grouped Behavior
Logo
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification: Downloader

Info_Project_BSV_2019.docm

Word Document

Created at 2019-06-18T08:41:00

...
Grouped Sequential

Monitored Processes

Process Graph

Process Graph Legend
Process Overview
»
ID PID Monitor Reason Integrity Level Image Name Command Line Origin ID
#1 0x904 Analysis Target Medium winword.exe "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n -
#2 0xae8 Child Process Medium loocipher.exe C:\Users\aETAdzjz\Documents\LooCipher.exe #1

Behavior Information - Grouped by Category

Process #1: winword.exe
291 2
»
Information Value
ID #1
File Name c:\program files\microsoft office\root\office16\winword.exe
Command Line "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n
Initial Working Directory C:\Users\aETAdzjz\Desktop\
Monitor Start Time: 00:00:23, Reason: Analysis Target
Unmonitor End Time: 00:03:49, Reason: Self Terminated
Monitor Duration 00:03:26
OS Process Information
»
Information Value
PID 0x904
Parent PID 0x458 (c:\windows\explorer.exe)
Bitness 64-bit
Is Created or Modified Executable False
Integrity Level Medium
Username YKYD69Q\aETAdzjz
Enabled Privileges SeChangeNotifyPrivilege
Thread IDs
0x 994
0x 990
0x 98C
0x 97C
0x 974
0x 964
0x 960
0x 95C
0x 958
0x 954
0x 950
0x 94C
0x 948
0x 944
0x 940
0x 920
0x 91C
0x 914
0x 910
0x 908
0x 9C0
0x A0C
0x A84
0x A88
0x A8C
0x B88
0x 764
Memory Dumps
»
Name Start VA End VA Dump Reason PE Rebuilds Bitness Entry Points AV YARA Actions
buffer 0x07E2BDAC 0x07E2BDF3 Marked Executable - 64-bit 0x07E2BDB4 False False
...
winword.exe 0x13FF40000 0x14011BFFF Relevant Image - 64-bit - False False
...
buffer 0x07E2C43C 0x07E2C487 Marked Executable - 64-bit 0x07E2C43C False False
...
buffer 0x07E2CA44 0x07E2CA87 Marked Executable - 64-bit 0x07E2CA44 False False
...
Downloaded Files
»
Filename File Size Hash Values YARA Match Actions
43cfb0a439705ab2bd7c46b39a7265ff0a14f7bd710b3e1432a9bdc4c1736c49 5.38 MB MD5: 0c7e59536a7be4a446bbe8b4f22e5880
SHA1: 1d1df205acf0efd78cda6994a1bb9780a5b7b005
SHA256: 43cfb0a439705ab2bd7c46b39a7265ff0a14f7bd710b3e1432a9bdc4c1736c49
SSDeep: 98304:+d+KQ0CO444hl1p7xFMe7rbbbbLG6wd57qw:+d+KQ0R44Q1rbbbbLG5 		False
...
Host Behavior
COM (3)
»
Operation Class Interface Additional Information Success Count Logfile
Create Microsoft.XMLHTTP IUnknown cls_context = CLSCTX_INPROC_SERVER, CLSCTX_LOCAL_SERVER, CLSCTX_REMOTE_SERVER True 1
Fn
Create Adodb.Stream IUnknown cls_context = CLSCTX_INPROC_SERVER, CLSCTX_LOCAL_SERVER, CLSCTX_REMOTE_SERVER True 1
Fn
Execute Microsoft.XMLHTTP IDispatch method_name = Open True 1
Fn
File (2)
»
Operation Filename Additional Information Success Count Logfile
Create LooCipher.exe - True 1
Fn
Write LooCipher.exe size = 0 True 1
Fn
Registry (53)
»
Operation Key Additional Information Success Count Logfile
Create Key HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common - True 1
Fn
Open Key HKEY_CLASSES_ROOT\Licenses - True 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib - True 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046} - True 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046}\8.7 - True 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046}\8.7\409 - False 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046}\8.7\9 - False 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046}\8.7\0 - True 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046}\8.7\0\win64 - True 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046}\8.7\0 - True 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib - True 4
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{000204EF-0000-0000-C000-000000000046} - True 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{000204EF-0000-0000-C000-000000000046}\4.2 - True 1
Fn
Open Key win64 - True 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{000204EF-0000-0000-C000-000000000046}\4.2\9 - True 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046} - True 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046}\8.7 - True 1
Fn
Open Key win64 - True 2
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046}\8.7\0 - True 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{00020430-0000-0000-C000-000000000046} - True 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0 - True 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046}\8.7\win64 - True 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0 - True 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52} - True 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}\2.8 - True 1
Fn
Open Key HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}\2.8\0 - True 1
Fn
Open Key HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common - True 1
Fn
Read Value HKEY_CLASSES_ROOT\Licenses\8804558B-B773-11d1-BC3E-0000F87552E7 data = } False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common value_name = RequireDeclaration, data = 108, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common value_name = CompileOnDemand, data = 0, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common value_name = NotifyUserBeforeStateLoss, data = 1, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common value_name = BackGroundCompile, data = 0, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common value_name = BreakOnAllErrors, data = 255, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common value_name = BreakOnServerErrors, data = 0, type = REG_NONE False 1
Fn
Read Value HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046}\8.7\0\win64 data = C:\Program Files\Microsoft Office\Root\Office16\MSWORD.OLB True 2
Fn
Read Value HKEY_CLASSES_ROOT\TypeLib\{000204EF-0000-0000-C000-000000000046}\4.2\9\win64 data = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7.1\VBE7.DLL True 1
Fn
Read Value HKEY_CLASSES_ROOT\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win64 data = C:\Windows\system32\stdole2.tlb True 1
Fn
Read Value HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}\2.8\0\win64 data = C:\Program Files\Common Files\Microsoft Shared\OFFICE16\MSO.DLL True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common value_name = VbaCapability, data = 0 False 1
Fn
Enumerate Keys HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046} - True 1
Fn
Enumerate Keys HKEY_CLASSES_ROOT\TypeLib\{000204EF-0000-0000-C000-000000000046} - True 1
Fn
Enumerate Keys HKEY_CLASSES_ROOT\TypeLib\{000204EF-0000-0000-C000-000000000046} - True 1
Fn
Enumerate Keys HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046} - True 1
Fn
Enumerate Keys HKEY_CLASSES_ROOT\TypeLib\{00020430-0000-0000-C000-000000000046} - True 1
Fn
Enumerate Keys HKEY_CLASSES_ROOT\TypeLib\{00020430-0000-0000-C000-000000000046} - True 1
Fn
Enumerate Keys HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52} - True 1
Fn
Enumerate Keys HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52} - True 1
Fn
Enumerate Keys HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52} - True 1
Fn
Process (1)
»
Operation Process Additional Information Success Count Logfile
Create LooCipher.exe os_pid = 0xae8, startup_flags = STARTF_USESHOWWINDOW, show_window = SW_SHOWMINIMIZED True 1
Fn
Module (149)
»
Operation Module Additional Information Success Count Logfile
Load Comctl32.dll base_address = 0x7fefbbe0000 True 1
Fn
Load C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7.1\VBEUI.DLL base_address = 0x7fee3190000 True 1
Fn
Load C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7.1\1033\VBE7INTL.DLL base_address = 0x7fef4a90000 True 1
Fn
Load OLEAUT32.DLL base_address = 0x7fefd480000 True 1
Fn
Load VBE7.DLL base_address = 0x7fee3970000 True 6
Fn
Get Handle c:\program files\microsoft office\root\office16\winword.exe base_address = 0x13ff40000 True 1
Fn
Get Handle c:\windows\system32\msi.dll base_address = 0x7fef9580000 True 1
Fn
Get Handle C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7.1\VBEUI.DLL base_address = 0x0 False 1
Fn
Get Handle c:\windows\system32\user32.dll base_address = 0x76f40000 True 1
Fn
Get Handle c:\windows\system32\oleaut32.dll base_address = 0x7fefd480000 True 1
Fn
Get Handle c:\windows\system32\ole32.dll base_address = 0x7fefea30000 True 1
Fn
Get Filename - process_name = c:\program files\microsoft office\root\office16\winword.exe, file_name_orig = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7.1\VBE7.DLL, size = 260 True 4
Fn
Get Address c:\windows\system32\msi.dll function = MsiProvideQualifiedComponentA, address_out = 0x7fef9603b3c True 1
Fn
Get Address c:\windows\system32\msi.dll function = MsiGetProductCodeA, address_out = 0x7fef95fa13c True 1
Fn
Get Address c:\windows\system32\msi.dll function = MsiReinstallFeatureA, address_out = 0x7fef9601618 True 1
Fn
Get Address c:\windows\system32\msi.dll function = MsiProvideComponentA, address_out = 0x7fef95ff088 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoVBADigSigCallDlg, address_out = 0x7fee32972c0 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoVbaInitSecurity, address_out = 0x7fee32060b0 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFIEPolicyAndVersion, address_out = 0x7fee31b1a60 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFAnsiCodePageSupportsLCID, address_out = 0x7fee3205f50 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFInitOffice, address_out = 0x7fee31af000 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoUninitOffice, address_out = 0x7fee319e860 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFGetFontSettings, address_out = 0x7fee3193fc0 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoRgchToRgwch, address_out = 0x7fee31a2380 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoHrSimpleQueryInterface, address_out = 0x7fee3197b80 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoHrSimpleQueryInterface2, address_out = 0x7fee3197b20 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFCreateControl, address_out = 0x7fee3198730 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFLongLoad, address_out = 0x7fee32d3260 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFLongSave, address_out = 0x7fee32d3280 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFGetTooltips, address_out = 0x7fee31a1f40 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFSetTooltips, address_out = 0x7fee3206370 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFLoadToolbarSet, address_out = 0x7fee31f4590 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFCreateToolbarSet, address_out = 0x7fee31955b0 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoHpalOffice, address_out = 0x7fee31a0240 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFWndProcNeeded, address_out = 0x7fee3193d10 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFWndProc, address_out = 0x7fee3196d30 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFCreateITFCHwnd, address_out = 0x7fee3193d40 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoDestroyITFC, address_out = 0x7fee319e6f0 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFPitbsFromHwndAndMsg, address_out = 0x7fee319df40 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFGetComponentManager, address_out = 0x7fee3197bf0 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoMultiByteToWideChar, address_out = 0x7fee319fcd0 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoWideCharToMultiByte, address_out = 0x7fee3198b20 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoHrRegisterAll, address_out = 0x7fee3292ef0 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFSetComponentManager, address_out = 0x7fee31a42c0 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFCreateStdComponentManager, address_out = 0x7fee3193e20 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFHandledMessageNeeded, address_out = 0x7fee319ab10 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoPeekMessage, address_out = 0x7fee319a7d0 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFCreateIPref, address_out = 0x7fee3191550 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoDestroyIPref, address_out = 0x7fee319e830 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoChsFromLid, address_out = 0x7fee31913d0 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoCpgFromChs, address_out = 0x7fee3196660 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoSetLocale, address_out = 0x7fee3191500 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoFSetHMsoinstOfSdm, address_out = 0x7fee3193dd0 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoSetVbaInterfaces, address_out = 0x7fee32971e0 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = MsoGetControlInstanceId, address_out = 0x7fee3266d10 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = VbeuiFIsEdpEnabled, address_out = 0x7fee32d98e0 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbeui.dll function = VbeuiEnterpriseProtect, address_out = 0x7fee32d9830 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = SysFreeString, address_out = 0x7fefd481320 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = LoadTypeLib, address_out = 0x7fefd48f1e0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = RegisterTypeLib, address_out = 0x7fefd4dcaa0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = QueryPathOfRegTypeLib, address_out = 0x7fefd511760 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = UnRegisterTypeLib, address_out = 0x7fefd5120d0 True 2
Fn
Get Address c:\windows\system32\oleaut32.dll function = OleTranslateColor, address_out = 0x7fefd4ac760 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = OleCreateFontIndirect, address_out = 0x7fefd4decd0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = OleCreatePictureIndirect, address_out = 0x7fefd4de840 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = OleLoadPicture, address_out = 0x7fefd4ef420 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = OleCreatePropertyFrameIndirect, address_out = 0x7fefd4e4ec0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = OleCreatePropertyFrame, address_out = 0x7fefd4e9350 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = OleIconToCursor, address_out = 0x7fefd4b6e40 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = LoadTypeLibEx, address_out = 0x7fefd48a550 True 2
Fn
Get Address c:\windows\system32\oleaut32.dll function = OleLoadPictureEx, address_out = 0x7fefd4ef320 True 1
Fn
Get Address c:\windows\system32\user32.dll function = GetSystemMetrics, address_out = 0x76f594f0 True 1
Fn
Get Address c:\windows\system32\user32.dll function = MonitorFromWindow, address_out = 0x76f55f08 True 1
Fn
Get Address c:\windows\system32\user32.dll function = MonitorFromRect, address_out = 0x76f52b00 True 1
Fn
Get Address c:\windows\system32\user32.dll function = MonitorFromPoint, address_out = 0x76f4ab64 True 1
Fn
Get Address c:\windows\system32\user32.dll function = EnumDisplayMonitors, address_out = 0x76f55c30 True 1
Fn
Get Address c:\windows\system32\user32.dll function = GetMonitorInfoA, address_out = 0x76f4a730 True 1
Fn
Get Address c:\windows\system32\user32.dll function = EnumDisplayDevicesA, address_out = 0x76f4a5b4 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = DispCallFunc, address_out = 0x7fefd482270 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = CreateTypeLib2, address_out = 0x7fefd50dbd0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarDateFromUdate, address_out = 0x7fefd485c90 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarUdateFromDate, address_out = 0x7fefd486330 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = GetAltMonthNames, address_out = 0x7fefd4a66c0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarNumFromParseNum, address_out = 0x7fefd484710 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarParseNumFromStr, address_out = 0x7fefd4848f0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarDecFromR4, address_out = 0x7fefd4bb640 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarDecFromR8, address_out = 0x7fefd4bb360 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarDecFromDate, address_out = 0x7fefd4c2640 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarDecFromI4, address_out = 0x7fefd4a58a0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarDecFromCy, address_out = 0x7fefd4a5820 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarR4FromDec, address_out = 0x7fefd4baf20 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = GetRecordInfoFromTypeInfo, address_out = 0x7fefd4da0c0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = GetRecordInfoFromGuids, address_out = 0x7fefd512160 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = SafeArrayGetRecordInfo, address_out = 0x7fefd4a5af0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = SafeArraySetRecordInfo, address_out = 0x7fefd4a5a90 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = SafeArrayGetIID, address_out = 0x7fefd4a5a60 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = SafeArraySetIID, address_out = 0x7fefd4a5a30 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = SafeArrayCopyData, address_out = 0x7fefd4860b0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = SafeArrayAllocDescriptorEx, address_out = 0x7fefd483e90 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = SafeArrayCreateEx, address_out = 0x7fefd4d9f80 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarFormat, address_out = 0x7fefd509b20 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarFormatDateTime, address_out = 0x7fefd509aa0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarFormatNumber, address_out = 0x7fefd509990 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarFormatPercent, address_out = 0x7fefd509890 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarFormatCurrency, address_out = 0x7fefd509770 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarWeekdayName, address_out = 0x7fefd4eb8d0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarMonthName, address_out = 0x7fefd4eb800 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarAdd, address_out = 0x7fefd5048e0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarAnd, address_out = 0x7fefd509470 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarCat, address_out = 0x7fefd5096a0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarDiv, address_out = 0x7fefd502fe0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarEqv, address_out = 0x7fefd509cf0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarIdiv, address_out = 0x7fefd508ff0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarImp, address_out = 0x7fefd509c00 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarMod, address_out = 0x7fefd508e60 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarMul, address_out = 0x7fefd503690 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarOr, address_out = 0x7fefd5092d0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarPow, address_out = 0x7fefd502e80 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarSub, address_out = 0x7fefd503f90 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarXor, address_out = 0x7fefd5091a0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarAbs, address_out = 0x7fefd4e7c30 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarFix, address_out = 0x7fefd4e7a60 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarInt, address_out = 0x7fefd4e7890 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarNeg, address_out = 0x7fefd4e7ea0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarNot, address_out = 0x7fefd509600 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarRound, address_out = 0x7fefd4e76a0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarCmp, address_out = 0x7fefd5083f0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarDecAdd, address_out = 0x7fefd4b3070 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarDecCmp, address_out = 0x7fefd4bd700 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarBstrCat, address_out = 0x7fefd4bd890 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarCyMulI4, address_out = 0x7fefd49caf0 True 1
Fn
Get Address c:\windows\system32\oleaut32.dll function = VarBstrCmp, address_out = 0x7fefd4a8a00 True 1
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbe7.dll function = 716, address_out = 0x7fee3cb24c8 True 3
Fn
Get Address c:\program files\microsoft office\root\vfs\programfilescommonx64\microsoft shared\vba\vba7.1\vbe7.dll function = 600, address_out = 0x7fee3a74ee0 True 3
Fn
Get Address c:\windows\system32\ole32.dll function = DllDebugObjectRPCHook, address_out = 0x7fefebaafd0 True 1
Fn
Window (1)
»
Operation Window Name Additional Information Success Count Logfile
Create - class_name = ThunderMain, wndproc_parameter = 0 True 1
Fn
System (19)
»
Operation Additional Information Success Count Logfile
Get Cursor x_out = 912, y_out = 431 True 2
Fn
Get Cursor x_out = 630, y_out = 293 True 1
Fn
Get Time type = System Time, time = 2019-06-18 08:42:13 (UTC) True 1
Fn
Get Time type = Ticks, time = 107125 True 1
Fn
Get Time type = Performance Ctr, time = 15905994101 True 1
Fn
Get Time type = Local Time, time = 2019-06-18 08:42:15 (Local Time) True 8
Fn
Get Time type = Local Time, time = 2019-06-18 08:42:16 (Local Time) True 1
Fn
Get Info type = Operating System True 2
Fn
Get Info type = Operating System True 2
Fn
Environment (1)
»
Operation Additional Information Success Count Logfile
Get Environment String name = DDRYBUR False 1
Fn
Network Behavior
HTTP Sessions (1)
»
Information Value
Total Data Sent 347 bytes
Total Data Received 5.38 MB
Contacted Host Count 1
Contacted Hosts 198.251.80.48
HTTP Session #1
»
Information Value
User Agent Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Server Name hcwyo5rfapkytajg.onion.pet
Server Port 80
Username -
Password -
Data Sent 347 bytes
Data Received 5.38 MB
Operation Additional Information Success Count Logfile
Open Session - True 1
Fn
Open Connection protocol = http, server_name = hcwyo5rfapkytajg.onion.pet, server_port = 80 True 1
Fn
Open HTTP Request http_verb = GET, http_version = HTTP 1.1, target_resource = /2hq68vxr3f.exe True 1
Fn
Send HTTP Request url = http://hcwyo5rfapkytajg.onion.pet/2hq68vxr3f.exe True 1
Fn
Read Response size_out = 0 True 1
Fn
Process #2: loocipher.exe
8970 0
»
Information Value
ID #2
File Name c:\users\aetadzjz\documents\loocipher.exe
Command Line C:\Users\aETAdzjz\Documents\LooCipher.exe
Initial Working Directory C:\Users\aETAdzjz\Documents\
Monitor Start Time: 00:00:49, Reason: Child Process
Unmonitor End Time: 00:04:29, Reason: Terminated by Timeout
Monitor Duration 00:03:40
OS Process Information
»
Information Value
PID 0xae8
Parent PID 0x904 (c:\program files\microsoft office\root\office16\winword.exe)
Bitness 32-bit
Is Created or Modified Executable True
Integrity Level Medium
Username YKYD69Q\aETAdzjz
Enabled Privileges SeChangeNotifyPrivilege
Thread IDs
0x AEC
0x AF8
0x AFC
0x B04
0x B10
0x B14
0x B3C
0x B40
0x B48
0x B4C
0x B50
0x B54
0x B74
0x B7C
0x B80
0x B94
0x B98
0x B9C
0x BAC
0x BB0
0x BD8
0x 7D0
0x 500
0x 360
0x 2AC
0x 534
0x 248
0x 6F4
0x 154
0x 118
0x 860
0x 824
0x 820
0x 34C
0x 41C
0x 898
0x 8C8
0x 8D4
0x 8B8
0x 8B0
0x 8AC
0x 8D8
0x 83C
0x 844
0x 938
0x 5E0
0x 21C
0x 3B4
0x 5A0
0x 6A4
0x 78C
0x 814
0x 890
0x 9F8
0x 9F0
0x 9F4
0x AA4
0x A08
0x 9E4
0x AF8
0x 7B0
0x B14
0x B54
0x B30
0x B98
0x 5D0
0x 6A8
0x B70
0x 710
0x 53C
0x 67C
0x 9A0
0x 994
0x BB0
0x 974
0x 704
0x 9AC
0x BD8
0x 9A8
0x 760
0x 7D0
0x 530
0x 360
0x 970
0x 2AC
0x 534
0x BD4
0x BDC
0x BEC
0x BE8
0x BE0
0x 420
0x A9C
0x 6F4
0x 6FC
0x 824
0x 930
0x 820
0x 4B8
0x BC4
0x 41C
0x 8C8
0x 8B8
0x 8B0
0x 540
Dropped Files
»
Filename File Size Hash Values YARA Match Actions
C:\ProgramData\Adobe\ARM\Reader_10.0.0\AdobeARM.bin.lcphr 373.52 KB MD5: f0a40ada59708f155a8700133c54b289
SHA1: 2c28fe1417757863a83a41de38b1ace2ebaea652
SHA256: c31b61eb49f93a0eae27053e7a00b3a4b5ee3500405853a77040ef4de80cf180
SSDeep: 6144:2s2dV0PvvRN9ONaFhEZW/9zP+jTG0OTW9qddRj/qTh67xBf821ct7f6scUh7wlV:23kNqKhfPm9qN/qThy11ctj6JUO 		False
...
Host Behavior
File (8717)
»
Operation Filename Additional Information Success Count Logfile
Create C:\ProgramData\Adobe\ARM\Reader_10.0.0\AdobeARM.bin desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Adobe\ARM\Reader_10.0.0\AdobeARM.bin.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Adobe\ARM\Reader_10.0.0\AdobeARM.bin desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\en-us.16\MasterDescriptor.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\en-us.16\MasterDescriptor.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\en-us.16\MasterDescriptor.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\en-us.16\stream.x86.en-us.man.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\en-us.16\stream.x86.en-us.man.dat.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\en-us.16\stream.x86.en-us.man.dat desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\x-none.16\MasterDescriptor.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\x-none.16\MasterDescriptor.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\x-none.16\MasterDescriptor.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\x-none.16\stream.x86.x-none.man.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\x-none.16\stream.x86.x-none.man.dat.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\x-none.16\stream.x86.x-none.man.dat desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\en-us.16\MasterDescriptor.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\en-us.16\MasterDescriptor.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\en-us.16\MasterDescriptor.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\en-us.16\stream.x86.en-us.man.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\en-us.16\stream.x86.en-us.man.dat.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\en-us.16\stream.x86.en-us.man.dat desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\x-none.16\MasterDescriptor.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\x-none.16\MasterDescriptor.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\x-none.16\MasterDescriptor.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\x-none.16\stream.x86.x-none.man.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\x-none.16\stream.x86.x-none.man.dat.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\x-none.16\stream.x86.x-none.man.dat desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\en-us.16\MasterDescriptor.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\en-us.16\MasterDescriptor.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\en-us.16\MasterDescriptor.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\en-us.16\stream.x64.en-us.man.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\en-us.16\stream.x64.en-us.man.dat.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\en-us.16\stream.x64.en-us.man.dat desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\x-none.16\MasterDescriptor.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\x-none.16\MasterDescriptor.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\x-none.16\MasterDescriptor.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\x-none.16\stream.x64.x-none.man.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\x-none.16\stream.x64.x-none.man.dat.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\x-none.16\stream.x64.x-none.man.dat desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.1.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.1.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.1.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\en-us.16\MasterDescriptor.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\en-us.16\MasterDescriptor.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\en-us.16\MasterDescriptor.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\en-us.16\stream.x64.en-us.man.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\en-us.16\stream.x64.en-us.man.dat.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\en-us.16\stream.x64.en-us.man.dat desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\x-none.16\MasterDescriptor.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\x-none.16\MasterDescriptor.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\x-none.16\MasterDescriptor.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\x-none.16\stream.x64.x-none.man.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\x-none.16\stream.x64.x-none.man.dat.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\x-none.16\stream.x64.x-none.man.dat desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\Manifest.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\Manifest.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\Manifest.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserManifest.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserManifest.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserManifest.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\MasterDescriptor.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\MasterDescriptor.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\MasterDescriptor.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\stream.Platform.Culture.man.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\stream.Platform.Culture.man.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\stream.Platform.Culture.man.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\stream.x64.en-us.man.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\stream.x64.en-us.man.dat.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\stream.x64.en-us.man.dat desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\MasterDescriptor.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\MasterDescriptor.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\MasterDescriptor.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\stream.Platform.x-none.man.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\stream.Platform.x-none.man.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\stream.Platform.x-none.man.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\stream.x64.x-none.man.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\stream.x64.x-none.man.dat.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\stream.x64.x-none.man.dat desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\MasterDescriptor.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\MasterDescriptor.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\MasterDescriptor.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\Stream.Platform.x-none.man.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\Stream.Platform.x-none.man.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\Stream.Platform.x-none.man.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\stream.x64.x-none.man.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\stream.x64.x-none.man.dat.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\stream.x64.x-none.man.dat desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\MasterDescriptor.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\MasterDescriptor.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\MasterDescriptor.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\Stream.Platform.Culture.man.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\Stream.Platform.Culture.man.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\Stream.Platform.Culture.man.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\stream.x64.en-us.man.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\stream.x64.en-us.man.dat.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\stream.x64.en-us.man.dat desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\MasterDescriptor.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\MasterDescriptor.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\MasterDescriptor.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\Stream.Platform.x-none.man.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\Stream.Platform.x-none.man.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\Stream.Platform.x-none.man.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\stream.x64.x-none.man.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\stream.x64.x-none.man.dat.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\stream.x64.x-none.man.dat desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\en-us.16\MasterDescriptor.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\en-us.16\MasterDescriptor.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\en-us.16\MasterDescriptor.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\en-us.16\stream.Platform.Culture.man.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\en-us.16\stream.Platform.Culture.man.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\en-us.16\stream.Platform.Culture.man.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\en-us.16\stream.x64.en-us.man.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\en-us.16\stream.x64.en-us.man.dat.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\en-us.16\stream.x64.en-us.man.dat desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\x-none.16\MasterDescriptor.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\x-none.16\MasterDescriptor.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\x-none.16\MasterDescriptor.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\x-none.16\stream.Platform.x-none.man.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\x-none.16\stream.Platform.x-none.man.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\x-none.16\stream.Platform.x-none.man.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\x-none.16\stream.x64.x-none.man.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\x-none.16\stream.x64.x-none.man.dat.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\x-none.16\stream.x64.x-none.man.dat desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.dcfmui.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.dcfmui.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.dcfmui.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.groovemui.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.groovemui.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.groovemui.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.lyncmui.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.lyncmui.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.lyncmui.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office32mui.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office32mui.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office32mui.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office32ww.msi.16.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office32ww.msi.16.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office32ww.msi.16.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.osmmui.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.osmmui.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.osmmui.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.osmuxmui.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.osmuxmui.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.osmuxmui.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Project.Project.x-none.msi.16.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Project.Project.x-none.msi.16.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Project.Project.x-none.msi.16.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.projectmui.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.projectmui.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.projectmui.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.visiomui.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.visiomui.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.visiomui.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeBackgroundTaskHandlerLogon.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeBackgroundTaskHandlerLogon.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeBackgroundTaskHandlerLogon.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeBackgroundTaskHandlerRegistration.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeBackgroundTaskHandlerRegistration.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeBackgroundTaskHandlerRegistration.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\resource.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\resource.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\resource.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\Cache\cache.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\Cache\cache.dat.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\Cache\cache.dat desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\tokens.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\tokens.dat.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\tokens.dat desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\RAC\StateData\RacMetaData.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\RAC\StateData\RacMetaData.dat.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\RAC\StateData\RacMetaData.dat desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\ProgramData\Microsoft\User Account Pictures\aETAdzjz.dat desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\User Account Pictures\aETAdzjz.dat.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\User Account Pictures\aETAdzjz.dat desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\User Account Pictures\Default Pictures\usertile10.bmp desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\User Account Pictures\Default Pictures\usertile10.bmp.lcphr desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Get Info C:\Users\aETAdzjz\Desktop\c2056.ini type = file_attributes False 1
Fn
Get Info C:\ type = file_attributes True 2
Fn
Get Info C:\$Recycle.Bin type = file_attributes True 2
Fn
Get Info C:\$Recycle.Bin\S-1-5-21-2345716840-1148442690-1481144037-1000 type = file_attributes True 2
Fn
Get Info C:\$Recycle.Bin\S-1-5-21-2345716840-1148442690-1481144037-1000\desktop.ini type = file_attributes True 2
Fn
Get Info C:\Boot type = file_attributes True 2
Fn
Get Info C:\Boot\BCD type = file_attributes True 2
Fn
Get Info C:\Boot\BCD.LOG type = file_attributes True 2
Fn
Get Info C:\Boot\BCD.LOG1 type = file_attributes True 2
Fn
Get Info C:\Boot\BCD.LOG2 type = file_attributes True 2
Fn
Get Info C:\Boot\BOOTSTAT.DAT type = file_attributes True 2
Fn
Get Info C:\Boot\cs-CZ type = file_attributes True 2
Fn
Get Info C:\Boot\cs-CZ\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\da-DK type = file_attributes True 2
Fn
Get Info C:\Boot\da-DK\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\de-DE type = file_attributes True 2
Fn
Get Info C:\Boot\de-DE\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\el-GR type = file_attributes True 2
Fn
Get Info C:\Boot\el-GR\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\en-US type = file_attributes True 2
Fn
Get Info C:\Boot\en-US\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\en-US\memtest.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\es-ES type = file_attributes True 2
Fn
Get Info C:\Boot\es-ES\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\fi-FI type = file_attributes True 2
Fn
Get Info C:\Boot\fi-FI\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\Fonts type = file_attributes True 2
Fn
Get Info C:\Boot\Fonts\chs_boot.ttf type = file_attributes True 2
Fn
Get Info C:\Boot\Fonts\cht_boot.ttf type = file_attributes True 2
Fn
Get Info C:\Boot\Fonts\jpn_boot.ttf type = file_attributes True 2
Fn
Get Info C:\Boot\Fonts\kor_boot.ttf type = file_attributes True 2
Fn
Get Info C:\Boot\Fonts\wgl4_boot.ttf type = file_attributes True 2
Fn
Get Info C:\Boot\fr-FR type = file_attributes True 2
Fn
Get Info C:\Boot\fr-FR\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\hu-HU type = file_attributes True 2
Fn
Get Info C:\Boot\hu-HU\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\it-IT type = file_attributes True 2
Fn
Get Info C:\Boot\it-IT\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\ja-JP type = file_attributes True 2
Fn
Get Info C:\Boot\ja-JP\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\ko-KR type = file_attributes True 2
Fn
Get Info C:\Boot\ko-KR\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\memtest.exe type = file_attributes True 2
Fn
Get Info C:\Boot\nb-NO type = file_attributes True 2
Fn
Get Info C:\Boot\nb-NO\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\nl-NL type = file_attributes True 2
Fn
Get Info C:\Boot\nl-NL\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\pl-PL type = file_attributes True 2
Fn
Get Info C:\Boot\pl-PL\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\pt-BR type = file_attributes True 2
Fn
Get Info C:\Boot\pt-BR\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\pt-PT type = file_attributes True 2
Fn
Get Info C:\Boot\pt-PT\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\ru-RU type = file_attributes True 2
Fn
Get Info C:\Boot\ru-RU\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\sv-SE type = file_attributes True 2
Fn
Get Info C:\Boot\sv-SE\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\tr-TR type = file_attributes True 2
Fn
Get Info C:\Boot\tr-TR\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\zh-CN type = file_attributes True 2
Fn
Get Info C:\Boot\zh-CN\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\zh-HK type = file_attributes True 2
Fn
Get Info C:\Boot\zh-HK\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\Boot\zh-TW type = file_attributes True 2
Fn
Get Info C:\Boot\zh-TW\bootmgr.exe.mui type = file_attributes True 2
Fn
Get Info C:\bootmgr type = file_attributes True 2
Fn
Get Info C:\BOOTSECT.BAK type = file_attributes True 2
Fn
Get Info C:\Documents and Settings type = file_attributes True 2
Fn
Get Info C:\hiberfil.sys type = file_attributes False 2
Fn
Get Info C:\pagefile.sys type = file_attributes False 2
Fn
Get Info C:\PerfLogs type = file_attributes True 2
Fn
Get Info C:\Program Files type = file_attributes True 1
Fn
Get Info C:\Program Files (x86) type = file_attributes True 1
Fn
Get Info C:\ProgramData type = file_attributes True 2
Fn
Get Info C:\ProgramData\Adobe type = file_attributes True 2
Fn
Get Info C:\ProgramData\Adobe\Acrobat type = file_attributes True 2
Fn
Get Info C:\ProgramData\Adobe\Acrobat\10.0 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Adobe\Acrobat\10.0\Replicate type = file_attributes True 2
Fn
Get Info C:\ProgramData\Adobe\Acrobat\10.0\Replicate\Security type = file_attributes True 2
Fn
Get Info C:\ProgramData\Adobe\Acrobat\10.0\Replicate\Security\directories.acrodata type = file_attributes True 2
Fn
Get Info C:\ProgramData\Adobe\ARM type = file_attributes True 2
Fn
Get Info C:\ProgramData\Adobe\ARM\Reader_10.0.0 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Adobe\ARM\Reader_10.0.0\18541 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Adobe\ARM\Reader_10.0.0\18541\AcrobatUpdater.exe type = file_attributes True 2
Fn
Get Info C:\ProgramData\Adobe\ARM\Reader_10.0.0\18541\AdobeARM.exe type = file_attributes True 2
Fn
Get Info C:\ProgramData\Adobe\ARM\Reader_10.0.0\18541\AdobeARMHelper.exe type = file_attributes True 2
Fn
Get Info C:\ProgramData\Adobe\ARM\Reader_10.0.0\18541\ReaderUpdater.exe type = file_attributes True 2
Fn
Get Info C:\ProgramData\Adobe\ARM\Reader_10.0.0\AdbeRdrSecUpd10111.msp type = file_attributes True 2
Fn
Get Info C:\ProgramData\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10110_MUI.msp type = file_attributes True 2
Fn
Get Info C:\ProgramData\Adobe\ARM\Reader_10.0.0\AdbeRdrUpd10116_MUI.msp type = file_attributes True 2
Fn
Get Info C:\ProgramData\Adobe\ARM\Reader_10.0.0\AdobeARM.bin type = file_attributes True 2
Fn
Get Info C:\ProgramData\Adobe\ARM\Reader_10.0.0\ARM.msi type = file_attributes True 2
Fn
Get Info C:\ProgramData\Adobe\ARM\Reader_10.0.0\Reader10Manifest.msi type = file_attributes True 2
Fn
Get Info C:\ProgramData\Application Data type = file_attributes True 2
Fn
Get Info C:\ProgramData\Desktop type = file_attributes True 2
Fn
Get Info C:\ProgramData\Documents type = file_attributes True 2
Fn
Get Info C:\ProgramData\Favorites type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\Assistance type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\Assistance\Client type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\Assistance\Client\1.0 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_CValidator.H1D type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MKWD_AssetId.H1W type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MKWD_BestBet.H1W type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MTOC_help.H1H type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MValidator.H1D type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MValidator.Lck type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\en-us.16 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\en-us.16\MasterDescriptor.en-us.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\en-us.16\s321033.hash type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\en-us.16\stream.x86.en-us.man.dat type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\x-none.16 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\x-none.16\MasterDescriptor.x-none.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\x-none.16\s320.hash type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\x-none.16\stream.x86.x-none.man.dat type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\en-us.16 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\en-us.16\MasterDescriptor.en-us.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\en-us.16\s321033.hash type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\en-us.16\stream.x86.en-us.man.dat type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\x-none.16 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\x-none.16\MasterDescriptor.x-none.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\x-none.16\s320.hash type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\x-none.16\stream.x86.x-none.man.dat type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\en-us.16 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\en-us.16\MasterDescriptor.en-us.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\en-us.16\s641033.hash type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\en-us.16\stream.x64.en-us.man.dat type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\x-none.16 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\x-none.16\MasterDescriptor.x-none.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\x-none.16\s640.hash type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\x-none.16\stream.x64.x-none.man.dat type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.1.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\en-us.16 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\en-us.16\MasterDescriptor.en-us.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\en-us.16\s641033.hash type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\en-us.16\stream.x64.en-us.man.dat type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\x-none.16 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\x-none.16\MasterDescriptor.x-none.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\x-none.16\s640.hash type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\x-none.16\stream.x64.x-none.man.dat type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\MachineData type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA} type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8} type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\Manifest.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserManifest.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\MachineData\Integration type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\MachineData\Integration\ShortcutBackups type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\3EE704C9-9D8D-408A-8094-3FFBD3100627 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\3EE704C9-9D8D-408A-8094-3FFBD3100627\x-none.16 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\MasterDescriptor.en-us.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\s641033.hash type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\stream.Platform.Culture.man.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\stream.x64.en-us.hash type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\stream.x64.en-us.man.dat type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\MasterDescriptor.x-none.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\s640.hash type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\stream.Platform.x-none.man.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\stream.x64.x-none.hash type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\stream.x64.x-none.man.dat type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\en-us.16 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\MasterDescriptor.x-none.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\s640.hash type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\Stream.Platform.x-none.man.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\stream.x64.x-none.hash type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\stream.x64.x-none.man.dat type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\MasterDescriptor.en-us.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\s641033.hash type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\Stream.Platform.Culture.man.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\stream.x64.en-us.hash type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\stream.x64.en-us.man.dat type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16 type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\MasterDescriptor.x-none.xml type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\s640.hash type = file_attributes True 2
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\Stream.Platform.x-none.man.xml type = file_attributes True 1
Fn
Get Info C:\ProgramData\Adobe\ARM\Reader_10.0.0\AdobeARM.bin type = file_type True 1
Fn
Get Info C:\ProgramData\Adobe\ARM\Reader_10.0.0\AdobeARM.bin.lcphr type = file_type True 1
Fn
Get Info C:\ProgramData\Adobe\ARM\Reader_10.0.0\AdobeARM.bin type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\en-us.16\MasterDescriptor.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\en-us.16\stream.x86.en-us.man.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\x-none.16\MasterDescriptor.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\x-none.16\stream.x86.x-none.man.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\en-us.16\MasterDescriptor.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\en-us.16\stream.x86.en-us.man.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\x-none.16\MasterDescriptor.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\x-none.16\stream.x86.x-none.man.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\en-us.16\MasterDescriptor.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\en-us.16\stream.x64.en-us.man.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\x-none.16\MasterDescriptor.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\x-none.16\stream.x64.x-none.man.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.1.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\en-us.16\MasterDescriptor.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\en-us.16\stream.x64.en-us.man.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\x-none.16\MasterDescriptor.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\x-none.16\stream.x64.x-none.man.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\Manifest.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserManifest.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\MasterDescriptor.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\stream.Platform.Culture.man.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\stream.x64.en-us.man.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\MasterDescriptor.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\stream.Platform.x-none.man.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\stream.x64.x-none.man.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\MasterDescriptor.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\Stream.Platform.x-none.man.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\stream.x64.x-none.man.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\MasterDescriptor.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\Stream.Platform.Culture.man.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\stream.x64.en-us.man.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\MasterDescriptor.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\Stream.Platform.x-none.man.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\stream.x64.x-none.man.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\en-us.16\MasterDescriptor.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\en-us.16\stream.Platform.Culture.man.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\en-us.16\stream.x64.en-us.man.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\x-none.16\MasterDescriptor.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\x-none.16\stream.Platform.x-none.man.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\x-none.16\stream.x64.x-none.man.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.dcfmui.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.groovemui.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.lyncmui.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office32mui.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office32ww.msi.16.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.osmmui.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.osmuxmui.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Project.Project.x-none.msi.16.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.projectmui.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.visiomui.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeBackgroundTaskHandlerLogon.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeBackgroundTaskHandlerRegistration.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\resource.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\Cache\cache.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\tokens.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\RAC\StateData\RacMetaData.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\User Account Pictures\aETAdzjz.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\User Account Pictures\aETAdzjz.dat.lcphr type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\User Account Pictures\aETAdzjz.dat type = file_type True 1
Fn
Get Info C:\ProgramData\Microsoft\User Account Pictures\Default Pictures\usertile10.bmp type = file_type True 1
Fn
Open STD_INPUT_HANDLE - True 1
Fn
Open STD_OUTPUT_HANDLE - True 1
Fn
Open STD_ERROR_HANDLE - True 1
Fn
Read C:\ProgramData\Adobe\ARM\Reader_10.0.0\AdobeARM.bin size = 4096, size_out = 4096 True 93
Fn
Data
Read C:\ProgramData\Adobe\ARM\Reader_10.0.0\AdobeARM.bin size = 4096, size_out = 1548 True 1
Fn
Data
Read C:\ProgramData\Adobe\ARM\Reader_10.0.0\AdobeARM.bin size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 4096 True 5
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 1893 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\en-us.16\stream.x86.en-us.man.dat size = 4096, size_out = 4096 True 216
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\en-us.16\stream.x86.en-us.man.dat size = 4096, size_out = 468 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\en-us.16\stream.x86.en-us.man.dat size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 4096 True 5
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 544 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\23A8C7B1-0195-4D07-B6CF-93A6BF126B2A\x-none.16\stream.x86.x-none.man.dat size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 4096 True 5
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 1893 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\en-us.16\stream.x86.en-us.man.dat size = 4096, size_out = 4096 True 216
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\en-us.16\stream.x86.en-us.man.dat size = 4096, size_out = 468 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\en-us.16\stream.x86.en-us.man.dat size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 4096 True 5
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 544 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\B67F2A9E-0258-4BAE-8ED4-AFE18C0C9A23\x-none.16\stream.x86.x-none.man.dat size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 4096 True 5
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 1615 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\en-us.16\stream.x64.en-us.man.dat size = 4096, size_out = 4096 True 215
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\en-us.16\stream.x64.en-us.man.dat size = 4096, size_out = 1988 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\en-us.16\stream.x64.en-us.man.dat size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 4096 True 5
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 529 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\D3BE4D83-2D47-4B3D-97F1-5483AB9ADC5C\x-none.16\stream.x64.x-none.man.dat size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml size = 4096, size_out = 1974 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.1.xml size = 4096, size_out = 1972 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.1.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml size = 4096, size_out = 1382 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 4096 True 5
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 1615 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\en-us.16\stream.x64.en-us.man.dat size = 4096, size_out = 4096 True 215
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\en-us.16\stream.x64.en-us.man.dat size = 4096, size_out = 1988 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\en-us.16\stream.x64.en-us.man.dat size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 4096 True 5
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 529 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\FCE80778-F5A2-48B5-BF04-93D6E887CBA7\x-none.16\stream.x64.x-none.man.dat size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml size = 4096, size_out = 614 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\Manifest.xml size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml size = 4096, size_out = 614 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserManifest.xml size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 4096 True 5
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 2774 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\stream.Platform.Culture.man.xml size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\en-us.16\stream.x64.en-us.man.dat size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 4096 True 5
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 2463 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\stream.Platform.x-none.man.xml size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7D4151FA-0263-42FB-99EC-A401902FE394\x-none.16\stream.x64.x-none.man.dat size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 4096 True 6
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 2257 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\Stream.Platform.x-none.man.xml size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94A84C64-77C0-403D-9E02-99FBBFE901CB\x-none.16\stream.x64.x-none.man.dat size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 4096 True 6
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 2188 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\Stream.Platform.Culture.man.xml size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\en-us.16\stream.x64.en-us.man.dat size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 4096 True 6
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 2257 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\Stream.Platform.x-none.man.xml size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\A2D24017-4FB1-4B3A-9228-31FD2D620B18\x-none.16\stream.x64.x-none.man.dat size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 4096 True 5
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 2837 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\en-us.16\MasterDescriptor.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\en-us.16\stream.Platform.Culture.man.xml size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\en-us.16\stream.x64.en-us.man.dat size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 4096 True 5
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 2912 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\x-none.16\MasterDescriptor.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\x-none.16\stream.Platform.x-none.man.xml size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B843911F-CE0B-422E-917E-7E7331D1BFAB\x-none.16\stream.x64.x-none.man.dat size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml size = 4096, size_out = 4096 True 10
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml size = 4096, size_out = 530 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml size = 4096, size_out = 4096 True 14
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml size = 4096, size_out = 3418 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml size = 4096, size_out = 2042 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml size = 4096, size_out = 4096 True 4
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml size = 4096, size_out = 1836 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.dcfmui.msi.16.en-us.xml size = 4096, size_out = 4096 True 2
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.dcfmui.msi.16.en-us.xml size = 4096, size_out = 1626 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.dcfmui.msi.16.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml size = 4096, size_out = 4096 True 119
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml size = 4096, size_out = 1522 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml size = 4096, size_out = 4096 True 9
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml size = 4096, size_out = 2150 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml size = 4096, size_out = 4096 True 9
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml size = 4096, size_out = 3150 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.groovemui.msi.16.en-us.xml size = 4096, size_out = 4096 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.groovemui.msi.16.en-us.xml size = 4096, size_out = 1252 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.groovemui.msi.16.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml size = 4096, size_out = 4096 True 25
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml size = 4096, size_out = 3338 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.lyncmui.msi.16.en-us.xml size = 4096, size_out = 4096 True 5
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.lyncmui.msi.16.en-us.xml size = 4096, size_out = 1634 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.lyncmui.msi.16.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office32mui.msi.16.en-us.xml size = 4096, size_out = 4096 True 4
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office32mui.msi.16.en-us.xml size = 4096, size_out = 590 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office32mui.msi.16.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office32ww.msi.16.x-none.xml size = 4096, size_out = 4096 True 83
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office32ww.msi.16.x-none.xml size = 4096, size_out = 3802 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office32ww.msi.16.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml size = 4096, size_out = 4096 True 28
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml size = 4096, size_out = 3572 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml size = 4096, size_out = 2042 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml size = 4096, size_out = 4096 True 24
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml size = 4096, size_out = 292 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml size = 4096, size_out = 4096 True 4
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml size = 4096, size_out = 2070 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml size = 4096, size_out = 1526 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.osmmui.msi.16.en-us.xml size = 4096, size_out = 4096 True 2
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.osmmui.msi.16.en-us.xml size = 4096, size_out = 2856 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.osmmui.msi.16.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml size = 4096, size_out = 2310 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.osmuxmui.msi.16.en-us.xml size = 4096, size_out = 4096 True 2
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.osmuxmui.msi.16.en-us.xml size = 4096, size_out = 2954 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.osmuxmui.msi.16.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml size = 4096, size_out = 4096 True 23
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml size = 4096, size_out = 3416 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml size = 4096, size_out = 4096 True 23
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml size = 4096, size_out = 2676 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml size = 4096, size_out = 4096 True 198
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml size = 4096, size_out = 2394 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml size = 4096, size_out = 4096 True 26
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml size = 4096, size_out = 1208 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml size = 4096, size_out = 4096 True 6
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml size = 4096, size_out = 2270 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Project.Project.x-none.msi.16.x-none.xml size = 4096, size_out = 4096 True 8
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Project.Project.x-none.msi.16.x-none.xml size = 4096, size_out = 1626 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Project.Project.x-none.msi.16.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.projectmui.msi.16.en-us.xml size = 4096, size_out = 4096 True 7
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.projectmui.msi.16.en-us.xml size = 4096, size_out = 3492 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.projectmui.msi.16.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml size = 4096, size_out = 4096 True 6
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml size = 4096, size_out = 2944 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml size = 4096, size_out = 4096 True 6
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml size = 4096, size_out = 1218 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml size = 4096, size_out = 4096 True 6
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml size = 4096, size_out = 1218 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml size = 4096, size_out = 2042 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml size = 4096, size_out = 4096 True 19
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml size = 4096, size_out = 2022 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml size = 4096, size_out = 4096 True 3
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml size = 4096, size_out = 1086 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml size = 4096, size_out = 4096 True 187
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml size = 4096, size_out = 804 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml size = 4096, size_out = 4096 True 42
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml size = 4096, size_out = 948 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.visiomui.msi.16.en-us.xml size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml size = 4096, size_out = 4096 True 22
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml size = 4096, size_out = 736 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml size = 4096, size_out = 4096 True 19
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml size = 4096, size_out = 354 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeBackgroundTaskHandlerLogon.xml size = 4096, size_out = 2816 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeBackgroundTaskHandlerLogon.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeBackgroundTaskHandlerRegistration.xml size = 4096, size_out = 3004 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeBackgroundTaskHandlerRegistration.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml size = 4096, size_out = 3304 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml size = 4096, size_out = 3238 True 1
Fn
Data
Read C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png size = 4096, size_out = 4096 True 31
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png size = 4096, size_out = 2769 True 1
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml size = 4096, size_out = 2913 True 1
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png size = 4096, size_out = 4096 True 10
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png size = 4096, size_out = 3528 True 1
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png size = 4096, size_out = 4096 True 7
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png size = 4096, size_out = 193 True 1
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png size = 4096, size_out = 4096 True 9
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png size = 4096, size_out = 2515 True 1
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png size = 4096, size_out = 4096 True 31
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png size = 4096, size_out = 2769 True 1
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml size = 4096, size_out = 1897 True 1
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png size = 4096, size_out = 4096 True 7
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png size = 4096, size_out = 193 True 1
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml size = 4096, size_out = 1334 True 1
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml size = 4096, size_out = 1334 True 1
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml size = 4096, size_out = 4096 True 3
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml size = 4096, size_out = 1139 True 1
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\resource.xml size = 4096, size_out = 1512 True 1
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\resource.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml size = 4096, size_out = 4096 True 2
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml size = 4096, size_out = 3172 True 1
Fn
Data
Read C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\Cache\cache.dat size = 4096, size_out = 4096 True 85
Fn
Data
Read C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\Cache\cache.dat size = 4096, size_out = 328 True 1
Fn
Data
Read C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\Cache\cache.dat size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\tokens.dat size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\ProgramData\Microsoft\RAC\StateData\RacMetaData.dat size = 4096, size_out = 8 True 1
Fn
Data
Read C:\ProgramData\Microsoft\RAC\StateData\RacMetaData.dat size = 4096, size_out = 0 True 1
Fn
Read C:\ProgramData\Microsoft\User Account Pictures\aETAdzjz.dat size = 4096, size_out = 0 True 1
Fn
Write C:\ProgramData\Adobe\ARM\Reader_10.0.0\AdobeARM.bin.lcphr size = 4096 True 93
Fn
Data
Write C:\ProgramData\Adobe\ARM\Reader_10.0.0\AdobeARM.bin.lcphr size = 1552 True 1
Fn
Data
Module (183)
»
Operation Module Additional Information Success Count Logfile
Load api-ms-win-core-synch-l1-2-0 base_address = 0x0 False 2
Fn
Load kernel32 base_address = 0x0 False 2
Fn
Load kernel32 base_address = 0x769e0000 True 2
Fn
Load api-ms-win-core-fibers-l1-1-1 base_address = 0x0 False 2
Fn
Load api-ms-win-core-localization-l1-2-1 base_address = 0x0 False 1
Fn
Load api-ms-win-core-string-l1-1-0 base_address = 0x0 False 1
Fn
Load api-ms-win-core-datetime-l1-1-1 base_address = 0x0 False 1
Fn
Load api-ms-win-core-localization-obsolete-l1-2-0 base_address = 0x0 False 1
Fn
Load api-ms-win-core-sysinfo-l1-2-1 base_address = 0x0 False 1
Fn
Load api-ms-win-appmodel-runtime-l1-1-2 base_address = 0x0 False 1
Fn
Get Handle c:\windows\syswow64\kernel32.dll base_address = 0x769e0000 True 2
Fn
Get Handle api-ms-win-core-synch-l1-2-0.dll base_address = 0x0 False 1
Fn
Get Handle c:\users\aetadzjz\documents\loocipher.exe base_address = 0xdc0000, flags = GET_MODULE_HANDLE_EX_FLAG_FROM_ADDRESS True 103
Fn
Get Filename api-ms-win-core-localization-l1-2-1 process_name = c:\users\aetadzjz\documents\loocipher.exe, file_name_orig = C:\Users\aETAdzjz\Documents\LooCipher.exe, size = 260 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll address_out = 0x769f4d28 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FlsAlloc, address_out = 0x769f4f2b True 3
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FlsSetValue, address_out = 0x769f4208 True 3
Fn
Get Address c:\windows\syswow64\kernel32.dll function = InitializeCriticalSectionEx, address_out = 0x769f4d28 True 2
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FlsGetValue, address_out = 0x769f1252 True 3
Fn
Get Address c:\windows\syswow64\kernel32.dll function = LCMapStringEx, address_out = 0x76a747f1 True 2
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FlsFree, address_out = 0x769f359f True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = InitOnceExecuteOnce, address_out = 0x76a0d627 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateEventExW, address_out = 0x76a7410b True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateSemaphoreW, address_out = 0x76a0ca5a True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateSemaphoreExW, address_out = 0x76a74195 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateThreadpoolTimer, address_out = 0x76a0ee7e True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetThreadpoolTimer, address_out = 0x7738441c True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WaitForThreadpoolTimerCallbacks, address_out = 0x773ac50e True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CloseThreadpoolTimer, address_out = 0x773ac381 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateThreadpoolWait, address_out = 0x76a0f088 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetThreadpoolWait, address_out = 0x773905d7 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CloseThreadpoolWait, address_out = 0x773aca24 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FlushProcessWriteBuffers, address_out = 0x77360b8c True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FreeLibraryWhenCallbackReturns, address_out = 0x7741fde8 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetCurrentProcessorNumber, address_out = 0x773b1e1d True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateSymbolicLinkW, address_out = 0x76a6cd11 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetCurrentPackageId, address_out = 0x0 False 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetTickCount64, address_out = 0x76a0eee0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetFileInformationByHandleEx, address_out = 0x76a0c78f True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetFileInformationByHandle, address_out = 0x76a1cbfc True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetSystemTimePreciseAsFileTime, address_out = 0x0 False 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = InitializeConditionVariable, address_out = 0x77378456 True 2
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WakeConditionVariable, address_out = 0x773e7de4 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WakeAllConditionVariable, address_out = 0x773a409d True 2
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SleepConditionVariableCS, address_out = 0x76a74b32 True 2
Fn
Get Address c:\windows\syswow64\kernel32.dll function = InitializeSRWLock, address_out = 0x77378456 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = AcquireSRWLockExclusive, address_out = 0x773729f1 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = TryAcquireSRWLockExclusive, address_out = 0x77384892 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ReleaseSRWLockExclusive, address_out = 0x773729ab True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SleepConditionVariableSRW, address_out = 0x76a74b74 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateThreadpoolWork, address_out = 0x76a0ee45 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SubmitThreadpoolWork, address_out = 0x773b8491 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CloseThreadpoolWork, address_out = 0x773ad8e2 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CompareStringEx, address_out = 0x76a746b1 True 2
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetLocaleInfoEx, address_out = 0x76a74751 True 2
Fn
Get Address c:\windows\syswow64\kernel32.dll function = AreFileApisANSI, address_out = 0x76a740d1 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = EnumSystemLocalesEx, address_out = 0x76a7424f True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetDateFormatEx, address_out = 0x76a86676 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetTimeFormatEx, address_out = 0x76a865f1 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetUserDefaultLocaleName, address_out = 0x76a747c1 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = IsValidLocaleName, address_out = 0x76a747e1 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = LCIDToLocaleName, address_out = 0x76a1ced4 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = LocaleNameToLCID, address_out = 0x76a74801 True 1
Fn
System (5)
»
Operation Additional Information Success Count Logfile
Get Time type = System Time, time = 2019-06-18 08:42:27 (UTC) True 3
Fn
Get Time type = Performance Ctr, time = 17552046406 True 1
Fn
Get Time type = Performance Ctr, time = 17555248043 True 1
Fn
Environment (2)
»
Operation Additional Information Success Count Logfile
Get Environment String - True 1
Fn
Data
Get Environment String name = USERPROFILE True 1
Fn
Function Logfile
Download-Icon
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy". 


    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image