73bf556b...434f | Sequential Behavior
Logo
Try VMRay Analyzer
VTI SCORE: 91/100
Dynamic Analysis Report
Classification: Riskware, Wiper, Ransomware

73bf556b35606c9b9ea033d4e93f057e890698126b0cc8cb7b85604c3688434f (SHA256)

1.exe

Windows Exe (x86-32)

Created at 2019-01-23 10:43:00

...

Notifications (2/5)

Some extracted files may be missing in the report since the total file extraction size limit was reached during the analysis. You can increase the limit in the configuration settings.

Some extracted files may be missing in the report since the maximum number of extracted files was reached during the analysis. You can increase the limit in the configuration settings.

The maximum number of reputation file hash requests (20 per analysis) was exceeded. As a result, the reputation status could not be queried for all file hashes. In order to get the reputation status for all file hashes, please increase the 'Max File Hash Requests' setting in the system configurations.

Code overwrite was observed during this analysis. Note that the analysis results may be affected by this modification by the sample.

The operating system was rebooted during the analysis.

Grouped Sequential

Monitored Processes

Process Graph

Process Graph Legend
Process Overview
»
ID PID Monitor Reason Integrity Level Image Name Command Line Origin ID
#1 0x7f8 Analysis Target High (Elevated) 1.exe "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe" -
#2 0x20c Child Process High (Elevated) cmd.exe "C:\Windows\system32\cmd.exe" #1
#3 0x244 Child Process High (Elevated) mode.com mode con cp select=1251 #2
#4 0x6fc Child Process High (Elevated) vssadmin.exe vssadmin delete shadows /all /quiet #2
#7 0x4f0 Autostart Medium 1.exe "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe" -
#8 0x4fc Autostart Medium 1.exe "C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1.exe" -
#9 0x710 Child Process Medium cmd.exe "C:\Windows\system32\cmd.exe" #7
#10 0x740 Child Process Medium mode.com mode con cp select=1251 #9
#11 0x768 Child Process Medium vssadmin.exe vssadmin delete shadows /all /quiet #9
#12 0x734 Child Process High (Elevated) 1.exe "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe" -a #7
#13 0x370 Child Process High (Elevated) cmd.exe "C:\Windows\system32\cmd.exe" #12
#14 0x5ec Child Process Medium cmd.exe "C:\Windows\system32\cmd.exe" #7
#15 0x78c Child Process High (Elevated) mode.com mode con cp select=1251 #13
#16 0x4f8 Child Process High (Elevated) vssadmin.exe vssadmin delete shadows /all /quiet #13

Behavior Information - Sequential View

Process #1: 1.exe
3676 0
»
Information Value
ID #1
File Name c:\users\5p5nrgjn0js halpmcxz\desktop\1.exe
Command Line "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe"
Initial Working Directory C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
Monitor Start Time: 00:00:30, Reason: Analysis Target
Unmonitor End Time: 00:01:13, Reason: Self Terminated
Monitor Duration 00:00:43
OS Process Information
»
Information Value
PID 0x7f8
Parent PID 0x460 (c:\windows\explorer.exe)
Is Created or Modified Executable True
Integrity Level High (Elevated)
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x 680
0x 7FC
0x 138
0x 424
0x 63C
0x 708
0x 180
0x 70C
0x 5AC
0x B0
0x 588
0x 5D8
0x 480
0x 724
0x 730
0x 538
0x 2A8
0x 6EC
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory rw True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000020000 0x00020000 0x00020fff Pagefile Backed Memory r True False False -
private_0x0000000000030000 0x00030000 0x00031fff Private Memory rw True False False -
private_0x0000000000030000 0x00030000 0x00030fff Private Memory rw True False False -
apisetschema.dll 0x00040000 0x00040fff Memory Mapped File rwx False False False -
private_0x0000000000050000 0x00050000 0x0008ffff Private Memory rw True False False -
private_0x0000000000090000 0x00090000 0x0018ffff Private Memory rw True False False -
pagefile_0x0000000000190000 0x00190000 0x00193fff Pagefile Backed Memory r True False False -
locale.nls 0x001a0000 0x00206fff Memory Mapped File r False False False -
private_0x0000000000210000 0x00210000 0x00210fff Private Memory rw True False False -
private_0x0000000000220000 0x00220000 0x00220fff Private Memory rw True False False -
private_0x0000000000230000 0x00230000 0x0023ffff Private Memory rw True False False -
pagefile_0x0000000000230000 0x00230000 0x0023efff Pagefile Backed Memory rw True False False -
private_0x0000000000230000 0x00230000 0x00230fff Private Memory rw True False False -
pagefile_0x0000000000240000 0x00240000 0x0024efff Pagefile Backed Memory rw True False False -
private_0x0000000000240000 0x00240000 0x00270fff Private Memory rw True False False -
private_0x0000000000240000 0x00240000 0x0027ffff Private Memory rw True False False -
private_0x0000000000280000 0x00280000 0x00280fff Private Memory rw True False False -
private_0x0000000000280000 0x00280000 0x0028ffff Private Memory rw True False False -
pagefile_0x0000000000280000 0x00280000 0x00286fff Pagefile Backed Memory rw True False False -
private_0x0000000000290000 0x00290000 0x0030ffff Private Memory rw True False False -
private_0x0000000000310000 0x00310000 0x003dffff Private Memory rw True False False -
private_0x0000000000310000 0x00310000 0x0031ffff Private Memory rw True False False -
private_0x0000000000310000 0x00310000 0x00310fff Private Memory rw True False False -
private_0x0000000000320000 0x00320000 0x00338fff Private Memory rw True False False -
private_0x0000000000320000 0x00320000 0x00320fff Private Memory rwx True False False -
private_0x0000000000330000 0x00330000 0x00330fff Private Memory rwx True False False -
pagefile_0x0000000000330000 0x00330000 0x00336fff Pagefile Backed Memory rw True False False -
private_0x0000000000330000 0x00330000 0x0036ffff Private Memory rw True False False -
private_0x0000000000340000 0x00340000 0x00341fff Private Memory rwx True False False -
private_0x0000000000350000 0x00350000 0x0035ffff Private Memory rwx True False False -
private_0x0000000000360000 0x00360000 0x00361fff Private Memory rwx True False False -
private_0x0000000000370000 0x00370000 0x00370fff Private Memory rwx True False False -
private_0x0000000000380000 0x00380000 0x003bffff Private Memory rw True False False -
pagefile_0x0000000000380000 0x00380000 0x00386fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000390000 0x00390000 0x00391fff Pagefile Backed Memory rw True False False -
pagefile_0x00000000003a0000 0x003a0000 0x003a6fff Pagefile Backed Memory rw True False False -
private_0x00000000003c0000 0x003c0000 0x003fffff Private Memory rw True False False -
1.exe 0x00400000 0x00887fff Memory Mapped File rwx True True False
...
private_0x0000000000890000 0x00890000 0x008cffff Private Memory rw True False False -
pagefile_0x00000000008d0000 0x008d0000 0x008d6fff Pagefile Backed Memory rw True False False -
private_0x00000000008d0000 0x008d0000 0x0090ffff Private Memory rw True False False -
private_0x0000000000910000 0x00910000 0x0094ffff Private Memory rw True False False -
private_0x0000000000980000 0x00980000 0x00a7ffff Private Memory rw True False False -
private_0x0000000000a80000 0x00a80000 0x00b7ffff Private Memory rw True False False -
private_0x0000000000bb0000 0x00bb0000 0x00bbffff Private Memory rw True False False -
pagefile_0x0000000000bc0000 0x00bc0000 0x00d47fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000d50000 0x00d50000 0x00ed0fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000ee0000 0x00ee0000 0x022dffff Pagefile Backed Memory r True False False -
pagefile_0x00000000022e0000 0x022e0000 0x02494fff Pagefile Backed Memory r True False False -
private_0x00000000022e0000 0x022e0000 0x023e0fff Private Memory rw True False False -
private_0x00000000022e0000 0x022e0000 0x023dffff Private Memory rw True False False -
private_0x00000000023e0000 0x023e0000 0x0241ffff Private Memory rw True False False -
private_0x0000000002420000 0x02420000 0x0245ffff Private Memory rw True False False -
private_0x0000000002460000 0x02460000 0x0249ffff Private Memory rw True False False -
private_0x00000000024a0000 0x024a0000 0x024affff Private Memory rw True False False -
pagefile_0x00000000024b0000 0x024b0000 0x028bffff Pagefile Backed Memory rw True False False -
sortdefault.nls 0x024b0000 0x0277efff Memory Mapped File r False False False -
private_0x0000000002780000 0x02780000 0x0287ffff Private Memory rw True False False -
private_0x0000000002880000 0x02880000 0x0297ffff Private Memory rw True False False -
pagefile_0x00000000028c0000 0x028c0000 0x02ccffff Pagefile Backed Memory rw True False False -
private_0x0000000002980000 0x02980000 0x02a7ffff Private Memory rw True False False -
pagefile_0x0000000002a80000 0x02a80000 0x02e72fff Pagefile Backed Memory r True False False -
private_0x0000000002e80000 0x02e80000 0x02f7ffff Private Memory rw True False False -
private_0x0000000002f80000 0x02f80000 0x0307ffff Private Memory rw True False False -
private_0x0000000003080000 0x03080000 0x0317ffff Private Memory rw True False False -
private_0x0000000003180000 0x03180000 0x0327ffff Private Memory rw True False False -
private_0x0000000003280000 0x03280000 0x032bffff Private Memory rw True False False -
private_0x00000000032c0000 0x032c0000 0x033bffff Private Memory rw True False False -
private_0x00000000033c0000 0x033c0000 0x033fffff Private Memory rw True False False -
private_0x0000000003400000 0x03400000 0x034fffff Private Memory rw True False False -
private_0x0000000003500000 0x03500000 0x03600fff Private Memory rw True False False -
private_0x0000000003610000 0x03610000 0x0364ffff Private Memory rw True False False -
private_0x0000000003650000 0x03650000 0x0374ffff Private Memory rw True False False -
private_0x0000000003750000 0x03750000 0x03850fff Private Memory rw True False False -
private_0x0000000003860000 0x03860000 0x0389ffff Private Memory rw True False False -
private_0x00000000038a0000 0x038a0000 0x0399ffff Private Memory rw True False False -
private_0x00000000039a0000 0x039a0000 0x03aa0fff Private Memory rw True False False -
private_0x0000000003ab0000 0x03ab0000 0x03aeffff Private Memory rw True False False -
private_0x0000000003af0000 0x03af0000 0x03beffff Private Memory rw True False False -
private_0x0000000003bf0000 0x03bf0000 0x03ceffff Private Memory rw True False False -
private_0x0000000003cf0000 0x03cf0000 0x03df0fff Private Memory rw True False False -
private_0x0000000003e00000 0x03e00000 0x03e3ffff Private Memory rw True False False -
private_0x0000000003e40000 0x03e40000 0x03f3ffff Private Memory rw True False False -
private_0x0000000003f40000 0x03f40000 0x04040fff Private Memory rw True False False -
private_0x0000000004050000 0x04050000 0x04150fff Private Memory rw True False False -
private_0x0000000004160000 0x04160000 0x04260fff Private Memory rw True False False -
private_0x0000000004270000 0x04270000 0x04370fff Private Memory rw True False False -
private_0x0000000004380000 0x04380000 0x0457ffff Private Memory rw True False False -
private_0x0000000004580000 0x04580000 0x045bffff Private Memory rw True False False -
wow64cpu.dll 0x74f80000 0x74f87fff Memory Mapped File rwx False False False -
wow64win.dll 0x74f90000 0x74febfff Memory Mapped File rwx False False False -
wow64.dll 0x74ff0000 0x7502efff Memory Mapped File rwx False False False -
wkscli.dll 0x75300000 0x7530efff Memory Mapped File rwx False False False -
davhlpr.dll 0x75310000 0x75317fff Memory Mapped File rwx False False False -
davclnt.dll 0x75320000 0x75336fff Memory Mapped File rwx False False False -
ntlanman.dll 0x75340000 0x75353fff Memory Mapped File rwx False False False -
winsta.dll 0x75360000 0x75388fff Memory Mapped File rwx False False False -
drprov.dll 0x75390000 0x75397fff Memory Mapped File rwx False False False -
mpr.dll 0x753a0000 0x753b1fff Memory Mapped File rwx False False False -
winmm.dll 0x753c0000 0x753f1fff Memory Mapped File rwx False False False -
comctl32.dll 0x75400000 0x75483fff Memory Mapped File rwx False False False -
cryptbase.dll 0x75590000 0x7559bfff Memory Mapped File rwx False False False -
sspicli.dll 0x755a0000 0x755fffff Memory Mapped File rwx False False False -
msvcrt.dll 0x75660000 0x7570bfff Memory Mapped File rwx False False False -
lpk.dll 0x75710000 0x75719fff Memory Mapped File rwx False False False -
sechost.dll 0x75a60000 0x75a78fff Memory Mapped File rwx False False False -
gdi32.dll 0x75a80000 0x75b0ffff Memory Mapped File rwx False False False -
rpcrt4.dll 0x75b10000 0x75bfffff Memory Mapped File rwx False False False -
shell32.dll 0x75cc0000 0x76909fff Memory Mapped File rwx False False False -
msctf.dll 0x76b30000 0x76bfbfff Memory Mapped File rwx False False False -
imm32.dll 0x76c00000 0x76c5ffff Memory Mapped File rwx False False False -
advapi32.dll 0x76f90000 0x7702ffff Memory Mapped File rwx False False False -
nsi.dll 0x77030000 0x77035fff Memory Mapped File rwx False False False -
user32.dll 0x771d0000 0x772cffff Memory Mapped File rwx False False False -
imagehlp.dll 0x772d0000 0x772f9fff Memory Mapped File rwx False False False -
ws2_32.dll 0x77300000 0x77334fff Memory Mapped File rwx False False False -
shlwapi.dll 0x77350000 0x773a6fff Memory Mapped File rwx False False False -
kernel32.dll 0x773b0000 0x774bffff Memory Mapped File rwx False False False -
usp10.dll 0x77550000 0x775ecfff Memory Mapped File rwx False False False -
kernelbase.dll 0x775f0000 0x77635fff Memory Mapped File rwx False False False -
private_0x0000000077640000 0x77640000 0x77739fff Private Memory rwx True False False -
private_0x0000000077740000 0x77740000 0x7785efff Private Memory rwx True False False -
ntdll.dll 0x77860000 0x77a08fff Memory Mapped File rwx False False False -
ntdll.dll 0x77a40000 0x77bbffff Memory Mapped File rwx False False False -
private_0x000000007ef89000 0x7ef89000 0x7ef8bfff Private Memory rw True False False -
private_0x000000007ef8c000 0x7ef8c000 0x7ef8efff Private Memory rw True False False -
private_0x000000007ef8f000 0x7ef8f000 0x7ef91fff Private Memory rw True False False -
private_0x000000007ef92000 0x7ef92000 0x7ef94fff Private Memory rw True False False -
private_0x000000007ef95000 0x7ef95000 0x7ef97fff Private Memory rw True False False -
private_0x000000007ef98000 0x7ef98000 0x7ef9afff Private Memory rw True False False -
private_0x000000007ef9b000 0x7ef9b000 0x7ef9dfff Private Memory rw True False False -
private_0x000000007ef9e000 0x7ef9e000 0x7efa0fff Private Memory rw True False False -
private_0x000000007efa1000 0x7efa1000 0x7efa3fff Private Memory rw True False False -
private_0x000000007efa4000 0x7efa4000 0x7efa6fff Private Memory rw True False False -
private_0x000000007efa7000 0x7efa7000 0x7efa9fff Private Memory rw True False False -
private_0x000000007efaa000 0x7efaa000 0x7efacfff Private Memory rw True False False -
private_0x000000007efad000 0x7efad000 0x7efaffff Private Memory rw True False False -
pagefile_0x000000007efb0000 0x7efb0000 0x7efd2fff Pagefile Backed Memory r True False False -
private_0x000000007efd5000 0x7efd5000 0x7efd7fff Private Memory rw True False False -
private_0x000000007efd8000 0x7efd8000 0x7efdafff Private Memory rw True False False -
private_0x000000007efdb000 0x7efdb000 0x7efddfff Private Memory rw True False False -
private_0x000000007efde000 0x7efde000 0x7efdefff Private Memory rw True False False -
private_0x000000007efdf000 0x7efdf000 0x7efdffff Private Memory rw True False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory r True False False -
pagefile_0x000000007efe0000 0x7efe0000 0x7f0dffff Pagefile Backed Memory r True False False -
private_0x000000007f0e0000 0x7f0e0000 0x7ffdffff Private Memory r True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
private_0x000000007fff0000 0x7fff0000 0x7fffffeffff Private Memory r True False False -
For performance reasons, the remaining 10 entries are omitted.
The remaining entries can be found in flog.txt.
Hook Information
»
Type Installer Target Size Information Actions
Code 1.exe:+0x111060 ntdll.dll:DbgBreakPoint+0x0 1 bytes -
...
Created Files
»
Filename File Size Hash Values YARA Match Actions
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML.id-9C354B42.[bestdecoding@cock.li].best 1.66 KB MD5: babf71c206cf8c7bb87be1d7f8d620d6
SHA1: 4fdf5447c3789d4ef60635ceff71beb83f468866
SHA256: 8c1b0fe9103da6a606d9d6d381b31a1828218bfc4e898f4a434d66791fc68108
SSDeep: 48:B1RusolgDvvitV3AVv9dWzml7THaU075WoK1pn:bSwR9dWzIHaL7dK3 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.id-9C354B42.[bestdecoding@cock.li].best 1.03 KB MD5: 55a79742092dbddd88d2e0946b0b5c5b
SHA1: 33f0317a82c602ae9d97ae6c95dfea08a90fc42b
SHA256: 0681263c6075c082f768afbf87dbc1ef14744d7f4c62949d513cefb932739dfa
SSDeep: 24:YqJ2nUS0aEmIsxI1Ny0Q4xqKm5yfGLUL9OJqjnOl7h16kxT7:HMnUS0aEmIsxI1rQ4xA5iGLUL9far1n 		False
...
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best 30.60 KB MD5: f17c7cacc9be1fa454bab29b8b5259d5
SHA1: ab4ec6a4ff9d46574f66a777c05b7973415d10b9
SHA256: 6493246ae5758538a9c1d673efcfebbdcc9237dffe30d0a668d309befbc68f83
SSDeep: 768:s3YcZPejWvt0VS+px2+TZP8205bj5nQxXL2ta+:s31Peaapx2+985cX+ 		False
...
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[bestdecoding@cock.li].best 1.88 KB MD5: cdab89c284b1982751f774abf0578d2d
SHA1: ec9a0290958e0efaedaae793ea7590851b5815e6
SHA256: 99d6cf4edab29b3bd1738a4adb4f6fd17c17f0cb8ca971a3a8b8100f6c12c14c
SSDeep: 48:tCcKi0PPpnw7/f31vWJiPfCbaLMZGP9iOj05kh1L:ORSflvdC+LxiOjDV 		False
...
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id-9C354B42.[bestdecoding@cock.li].best 1.66 KB MD5: c8b30dcd2238d06e900480996eacc8cb
SHA1: 722e935ecb858dae26d07c2790366bf3aba05e94
SHA256: 4dc51f9566095143a8d3aa211aec2c65181f68a2eae5fea8ce81b41038c7e91b
SSDeep: 48:XEdTAVlfqbSHquOVs6BRJfhymLGfD0Tm/nV1pn:flfqmHKVDXd9LGEmPV3 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.id-9C354B42.[bestdecoding@cock.li].best 1.05 KB MD5: 5a34d924af1a93a3cad81b01d6056639
SHA1: 733cce8753ea8cd6a9b08163ee0eadcff83aaafb
SHA256: 011a6d551ba6d3d9c9db6922c7b4e45460a648589dd95d66b78bbf186b1c7bdd
SSDeep: 24:olpkVODD/0HSoE6PbVs8ER+fuaL/P88hAWS2QsT37h16kxTD:V8D/U7E6z28EUfuaL/kf2ZV1v 		False
...
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best 2.47 KB MD5: d7af434ea274d3633de023adc662f945
SHA1: 859f99bafb79ba6d636acde015ec077227bc8d51
SHA256: b57119b189d1a401885a81f328000be0d449d1553fca094612cbc1086d319328
SSDeep: 48:2N9RljGe23Aa5urybjTM1cJdgVwtBfOlMXrX0fRstg6UJ+GVoh580X4Ijz1pn:ORNVeHbjTM1c/ffO4rX4QUZ+qIjz3 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id-9C354B42.[bestdecoding@cock.li].best 2.13 KB MD5: c2aa11d04b598a5fe82a65b5973f73b8
SHA1: 9ecd54aea1cc2a0903731f17ffac08b7a5cc6ad7
SHA256: c305c983e27769c5d9c65943ca045d3fea5985c2f2e9380bd4ee96655ad26198
SSDeep: 48:PtsFTTNI3XVep+luj2ZMYQBSetIhgvwuA1T:F4XS3XVRlW2lOIhuyN 		False
...
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[bestdecoding@cock.li].best 4.42 KB MD5: 3dd9bccfa0a61f3e0d5d2b4f0c400742
SHA1: 743d243912773d9de9a991de0cb5b7d767ed3033
SHA256: 99f12e2923db302dd4e899f1b22d52962e450aeb8b28a46de33a9f04a7a5cfd3
SSDeep: 96:egVr9qYFFhHDKQlK5Jmz0WGGgPWlUnvpUn7Jjr5CG+9l:FVr9qAhjKQlqmwDGvlUvpUljNC1l 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML.id-9C354B42.[bestdecoding@cock.li].best 3.36 KB MD5: 5de087fc860f09559a90567b940181fc
SHA1: 6a1e14e84701bb8d55b517382fba937675912fec
SHA256: f0b88c6b1c5225fcaba9545f64e8ef616542d573c6732aac989d2f38acdc8e27
SSDeep: 48:FUxNqOtKT4QOFj2MrJ03L1mBKyanjkHNFrqlUrcIEqrEG1VoGoSKS85DOwUuURtv:FlOK8HpWBbyu8ZrcIEqNKGo6wU/y5wbl 		False
...
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id-9C354B42.[bestdecoding@cock.li].best 1.55 KB MD5: 6aa67c6faea69e2e43da6a497021e59d
SHA1: 222c521a2a16e149ce88b2c137252752ee2307f3
SHA256: 9982947b21f9ed458c43e030de2cdfa7790f8861a2e397243b67845e10616703
SSDeep: 48:DfrIn533Mj4buZ6WIFXjVytL4xDOvEE7V+UzC1pn:zkn53NiZ6WIFzVAID6+qC3 		False
...
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best 2.54 KB MD5: 4e02e3095698913ed56e416eadbc5464
SHA1: e655b2c5a64cb27efc8a9e18b73466d5ba0f073d
SHA256: 9b3bfc482e0b37edfd00d1a54754fc7de892b8c021229693f0fe3d92ba4a3003
SSDeep: 48:9fSNVJ8DLBhNEKW6Gn54btL5MyoXesykaXfShktSm96Xb0WlqJRv8FIE31pn:9fAnCKn54bkyokXgm+gWEPxE33 		False
...
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe 1.70 MB MD5: b2dd45ded8bf0672e440af3c7f9d9af8
SHA1: c6ee2956af9815fa010f9487380b8b59946c2479
SHA256: 73bf556b35606c9b9ea033d4e93f057e890698126b0cc8cb7b85604c3688434f
SSDeep: 24576:3b/C94XonXCL/2e1xip2DTSDmIIRoBl5h5wGgx95FOjAepv8CuwlVvaOMc763Mc:3TC9OWXCN1RTkb/wep64BMWi 		False
...
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best 2.04 KB MD5: a0c6b2312482b4f355a97e97e4e4588e
SHA1: 040c0f318ab6992ae7a606d32a937e035c95f526
SHA256: 5672597fca39a9cda23e2e0f1a2bd0c1ced4a91377e517ab658ddc806dd4f783
SSDeep: 48:GpwKAaGYNNhQ4CCkEtBdmr/4Z8QRF8KAFzelbQ3JNcY01pn:ywba9RfzYm8UzA1tJCY03 		False
...
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id-9C354B42.[bestdecoding@cock.li].best 3.36 KB MD5: 1038e31130a9852fa225557faa6e31d9
SHA1: 9e631f1822174b37995dbb556fbe4735eacbe02c
SHA256: 0a18d9e3f787e8462cc35d5809fe0d438f0485dc103ed7613127b77014884351
SSDeep: 96:N+RTmIkuEHbSvrDop806aBsJErnWzH9aM2rjAl:N+RTmI/4bykNdBsJWnWzH9/GjAl 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best 1.65 KB MD5: 32f69a45285ce44c9aae4f7ef7b7c5b8
SHA1: d7effcc8109bef15454b0b337b15be853138b18b
SHA256: f4749dd34482e2446561343ad1099b8332e8d320e763d9b92a7923ce61f301a7
SSDeep: 48:CnCuDScvSlfeIQxCn9LxrQ8d4xKxeOXf7iFk1pn:CnbD9SktUn9LKnx4PXf7Mk3 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.id-9C354B42.[bestdecoding@cock.li].best 26.54 KB MD5: 1a380f794c6b41a126e6fe265e738584
SHA1: 0eb7fee49ae5348b146d8edff362bd52d303d3e6
SHA256: d2c28c86f58390b02eb01ff9dd5df4552776538321174247fb9e76f5fa9dc41a
SSDeep: 768:Ra596aaIn0muGp7NSpeVZCHr3o/9YxkWxs5+3x7A8ZRz:RylaIn0mHRSpQos/9yfYixnZRz 		False
...
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id-9C354B42.[bestdecoding@cock.li].best 582.61 KB MD5: cc7ae46ed2d2a69e98b1f7020038b719
SHA1: dad4fd8f6d3f92fcb6670a5f707e5be85be9a7e5
SHA256: 8f9e92f6ec10d07c532522032fda901a6345af44c8985d03f5e86898d6aee6d1
SSDeep: 12288:qjkTQS707pGAKyVlOGldvDU4uniCYrB2Kq4Hdi4kHesYAUnrzQPlKn:uMepGAjVlLY4unkt2GQ4oesNg/QPlq 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best 6.33 KB MD5: 71897db804295af78b29cd726214dae6
SHA1: 3e2a4c61ecf4d37c241d699ab1fb54464769a0ab
SHA256: 10fe44464621bb270a4f70f768352952233dbbf63fb7e140076d56b5c2801719
SSDeep: 192:H9+mqEzfZHqb/Xsc8A/wq8klVu195++tPLWUjPm71+IsW/zd6z8Bz53:BNKbvsVRdtPLWUzm7uWIz8z53 		False
...
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best 20.33 KB MD5: 4038a250f7781d12c0ee9974112da429
SHA1: aa6065b6390f46b9fa83af54402d36799003df35
SHA256: fa18e424f78e9a6ef33b8dee1eda14b1290358392dad8fcd4a593cc8d9fcc305
SSDeep: 384:Mfdhpa0X7R8Suil88XhFHVqeS/+pVybwXwShA9bG2kYdrIgwoOnXo39gWTXKaVuw:6PNBl88XbHpSEweAM2kYd0lc5X1kw 		False
...
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[bestdecoding@cock.li].best 3.21 MB MD5: 9042d2f1ea76d689cb61ded1cbdd4f38
SHA1: 1c2e5cfb27dde4e98f117b07d44d5e04a2f1e569
SHA256: b48aa517de7a86bfbb5d96ee1604916a5aa58d90aa4f70a0ab832d4034afe01b
SSDeep: 49152:5vlLsUloDoZmcLaSt20yrujThvLf2Ads8VPlWR:5xslDoHDVtPwR 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best 2.04 KB MD5: 27ee12c8fcd618ef4d7a3bdbbe1fabd9
SHA1: 57b3de6f49c2bba845e95c3b920285758dc710c4
SHA256: 06873641c8c3e64850cc6e2c1ebdad3aecb3f4a795327d16dc6d7f756e461a53
SSDeep: 48:1f85Esq3+HVbAS1qyK+DldvH0qCzhb9zBqCk3/a0WVx1pn:tYEsq3+qwPTdP0jzt99S3/IL3 		False
...
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[bestdecoding@cock.li].best 3.14 MB MD5: b20fbe48b3f191f6bf91932f724574ae
SHA1: 8c652aff7d80603ccfe301184bdd4df4e6c85339
SHA256: 461a23ba31e8deee23b38450d8bc7adc5d3e73039ac55cffc8d758dcee91b8f4
SSDeep: 49152:zDxL8QBo6Tex4S120ytJyyW7tl+xANXRUnL3rIdy6KuCr:zR89j1Xtl+acnLrYKxr 		False
...
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id-9C354B42.[bestdecoding@cock.li].best 9.51 KB MD5: f46b313ac4462652034eeca96704bace
SHA1: f1b8c6de1f56c1e0b2c7dae2ab3c7e4765a3ef44
SHA256: 8f558391ad7b924c3a1934e264f33701b95c703e9cc8a643b85ee62681b06b90
SSDeep: 192:E2NQha6UMyyQOstJC7S17OIIjWY8aCKvEdKwgb1PrqNO/upSFX5:NQha61ns27S8KYmKygxPrqgX5 		False
...
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.id-9C354B42.[bestdecoding@cock.li].best 1.44 KB MD5: 6173be502558c3eee748ee65d4dd00d5
SHA1: e7d93a9ce923a333ff21dc104924c4e88624c261
SHA256: 72e1f2755f9b9e9f6cdb17bf9c0d87ca39c822d28982e5a3aa29b13701ccb780
SSDeep: 24:AXgOajTUF6/yp2URUGNQ17XusOSRqcX8xN2uhENo4KIJ05/J7HSAvhICkea867hb:2gXiXUaSXDIc8hGopIJ0hgA5Ireq1F 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best 5.97 KB MD5: f0aa2a210a79b1ee167b8bff42f6dcbf
SHA1: 6b44a99a89dbb55efdbeb12b3572a9ed1ccb6e4e
SHA256: bc6fae77bdaf291e32a79d2fdb9be5e09731e601c5a7d972a500628e52edc64d
SSDeep: 96:TPTn1ZfB+9unSXYzedZYhfhRtYDVskUma/qA+mUGVRDCY2OdcvU/9wGVpAVh+a3:TPD1ZB+9unSXYCZYBuDER/qACQRDCY2b 		False
...
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best 4.33 KB MD5: 19c714ad8dfbbc4cefdce227e612a783
SHA1: 7322f107407c93fc6b7affc940d49af07d7a0b04
SHA256: 0e7bd6961d23564eb29a2470e65d2df969f586d7f4bd5c68a76003372ad19e71
SSDeep: 96:lUh9YVVKS5089TOSuRM/GTGBMpUyAjDb2Y6sDcWS4tVZ/XhjVwbxabHZ3:ieKS5j0RM/GTGSUf6ec0VZ/vwkLZ3 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML.id-9C354B42.[bestdecoding@cock.li].best 16.70 KB MD5: c25d58ec70d4317a299a47b1406afbf5
SHA1: de2518b5e47aa56c55039feef75027f19ab4c4f0
SHA256: 830a708e1a83ffe6beb71b5468eb6e595e419dfbea15c425f6401d64fe9cf15a
SSDeep: 384:lkW8xhKtkhYhDE0qtqFbKkO5dl14KByrO34b91i6C48iRutIZrCl:l7ehPMDYtqFnOjl1MrO3ZH48/qdS 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.id-9C354B42.[bestdecoding@cock.li].best 1.56 KB MD5: cf31ac1227f13c1b2210a7fef7a417b0
SHA1: e72b5b1ac33bc1e2c20fb4581af67a70789e17e2
SHA256: eb1d0b5cbb0f3a13bde692ccb1e8136c9646c7bd5d9141defa49fb727eccb6be
SSDeep: 24:o0mKhdh94EHpGjTO7IzmjdcSsP2N2x0PXG3aPPpW/xiBhv8rNuDapXWSb7h16kxZ:ZmKH3kKd1sON6YGqPUZjJ1R 		False
...
C:\Boot\BOOTSTAT.DAT.id-9C354B42.[bestdecoding@cock.li].best 64.25 KB MD5: fbb0ef0237c395eeb24ccb760313aba5
SHA1: 4f0b0ef4d06b9cf558a18945b22465297401960a
SHA256: 21f55fb542e4393a4333443e500d9ce37768d5ddaeacfde812d4708742ff5aec
SSDeep: 1536:dsFmgXsbLF1NHIGj8fKoF4LnTvdpL7Dpste4rdCq6J5Dh:dhj9Hpo8nLdpvSte45y5Dh 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best 2.54 KB MD5: 5197327c04b9e1bc35eea0631d462ca5
SHA1: efb7bca268419619ab78457f659f3caaf6752001
SHA256: dae375a14965206c83e8658c6b63d94ecc09b0d52b9e3db6700f866408d7210c
SSDeep: 48:CaIqlE4kK9SK/54Hytlz82dIaDJI5LAhvJUcea611pn:k8ERK9FR4H6w2dM5LABJ013 		False
...
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best 2.18 KB MD5: 48fe19e22e75e323be2660a70a4cdd9f
SHA1: 0bdde45480250b4199009547254e7ef48b8701da
SHA256: 3cb00ae32b3e8272451602a9375307f8bc17b143caef1d752b195eb3f64c2038
SSDeep: 48:xsdZj7R7PxhsPfEvHdt6gt4zPVluopKNF+YnmWKPGAwgF1Ir1pn:x27FGf0v4jPuoUF1WGAP1Ir3 		False
...
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.id-9C354B42.[bestdecoding@cock.li].best 855.24 KB MD5: 1641aa371c480cf8ac87fa052dd52497
SHA1: 93872d23bb56147378b618c77e5e37365f05d000
SHA256: 5b71ce7524cf4a85b7222820925a1052427bb4a37900737a498ad9dcee087511
SSDeep: 12288:8OPo5+VPzWa1Dfo9xlQbVhescsdJfxg6H3l2qgj3droO/oF1Y8LQ/e6h6v+ItGaM:8Og4lRdfoF8Ml6X4drd/oF28k/eYZr 		False
...
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id-9C354B42.[bestdecoding@cock.li].best 1.76 KB MD5: 28eabcc39bc6c112956fbae3c5aa788f
SHA1: 91ae0eb0883d9f2b2ac54926e0d2577cb75c57d5
SHA256: d726d5398b2e7b480626fac259e59636efbf46b5f00c62444aeb799fad8268c5
SSDeep: 48:9pipWpgd4fHxU93uDQ4QMMAdlAtlUsefQuEONM3ns0eK41n:nlprfHxAl4D+UseQ06d45 		False
...
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best 2.80 KB MD5: bffea15dabced9a9810d116d59c31529
SHA1: 3e42c66cf2a5a28170ce6a45baf8111475dc0b87
SHA256: d01db35f7d2f1e400c6453ba0716508a4127907642164870fc296d23c4e00de3
SSDeep: 48:6WhsEoOXc0kAuI5O++JpCvtJZ/pHf1X6xj3IydLM6jXfEUFDMN1PXLrJf8y0ncD9:6UbPRFuI5NxhtSj3IFsdqN1PXLlf85cx 		False
...
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[bestdecoding@cock.li].best 10.00 MB MD5: 2fb10a322517f7cbfb3a6cfe3f7ec571
SHA1: f50dbea0bf05e4a4f73abb265fef52fa43db4e07
SHA256: 5ef870f132dab830dd5380a5f66f2db9ead790ee6610fc191c638c2aecd616a4
SSDeep: 196608:6a8A7fKP0ReD0wXKLUEfRrDXP2ifogB2jHcSBLWiyvyWJRMLhdPWfi:6aRDKP0q0wM9JrL2ifJcjhW/6vL3Ai 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best 1.80 KB MD5: d84aead7fe2ebc9f5fecd380bd2c5d4e
SHA1: 41da780a54af02b7f368f151743a44896341cd59
SHA256: b86ab2f783a52f1f26e8b2c8ad3ac752f138cc6660d267675433e7e6a47bf4f2
SSDeep: 48:Pvma2P/7rVQQKIqUCtJb6J7YuPJxi3pkZOlL1pn:PS7rV9zqbT/uf0pkQJ3 		False
...
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best 1.80 KB MD5: 33957dfe919be8089abed4cde768b3c5
SHA1: aaccb3f94a127e71cd4651c5459178397fe9f604
SHA256: cf0bd81b4daf4d68183b6a15bba8e11fe1d954606ab863d8d748e93412a2a086
SSDeep: 48:HPnNFYBzphJjhsnUVs/YvRa6dsxLQ4s2f5L1pn:PNFYBzBj6nUy/Yvc8szL3 		False
...
C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini.id-9C354B42.[bestdecoding@cock.li].best 0.37 KB MD5: 2a5ce75a5c8fbdfc1e48bec00b97c053
SHA1: 83462f0ed5070595753c29f815eee4e9d178d6fc
SHA256: 47017a5ef04478e5a7ed0a96337254c5e7238c58b583ccc42eb41ebd8a0aaea7
SSDeep: 6:sfsun9Kou243ceSb2womGGdTAi6WC7VqU678C/93KzjutCzF8etVGmO5C6xP/:lI9zuPceSb2woZ6ApOU678C/96XM45n6 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best 9.37 KB MD5: 4727abef6d09e9b3bde1ba5bafdbf81e
SHA1: 7178763522729d561ca1a5195d24958bb1fd50ae
SHA256: cce1b4688c3068e39dac4b48c9e9e6590732fc44cb54acc40d29e2b10fcc6cca
SSDeep: 192:iSqRzEuH0+JZYdgPtPaeEzn2iStERNZUZadiBkSQlX6ws7mZj+TqfWcK3:PqWuUuhSeEnkEnEadaQUwxh+TH53 		False
...
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id-9C354B42.[bestdecoding@cock.li].best 1.81 KB MD5: 7608aa9e3602a990a43159de944d8696
SHA1: 9270bcdec078eba656dbc8ef5ebede33ab96cace
SHA256: 0be929c3dbd44877af77749dea71c1bb0ac3a47b50eeadc78cd0a94bc1293e20
SSDeep: 48:ANz5ofdn1VHGsA4h9mV/Pr3RVVUE5Z4LgUbseW17:ANz5oVn1AsA4LMRVmEYvul 		False
...
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id-9C354B42.[bestdecoding@cock.li].best 1.05 KB MD5: 135ec83497bee045265455f9d3c8714a
SHA1: 6c53cc9dcf70d6f40b1bbbaa88e451db247ade89
SHA256: 0d516f8a465d510da6cd2afb2d9080e0ac0631a585984278cc461780682477d4
SSDeep: 24:bbJEaaZH5IlbQg/n4CLPEgqTS9eeN9EKhWS2bXp7h16kxTD:bbiaaZH5kQg/nVLPEgqeICEa271v 		False
...
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[bestdecoding@cock.li].best 3.21 MB MD5: 1be0c60cfd2873147f4f63683681c14a
SHA1: 6341dc76d2af5f64b7078430ecabd2ae4714c67c
SHA256: bc013952559b0fce340aedadb61098edb72149976d1a762e4e68e62ebc42cf83
SSDeep: 49152:Crh2TUGD0HEytsDd5D9kwfbF4diB/SC9GMzff7Nz7kk7oU0PnHFltB+t5VfopF:llyaDH9kcidg6C9NfjN0+inHftQAF 		False
...
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[bestdecoding@cock.li].best 4.42 KB MD5: c1d3f28e110c70b6b84e2be00cc683af
SHA1: 2da9717a6c1160e9e77e24817e5d662c2fef28a4
SHA256: 69e11bfef74112b83bda85dbf9a46d512ded5fd33fdc7cf4b42d6726fbf214f6
SSDeep: 96:vgCfgwUe3evBwmkdM6OL7CuCz3FeG+y7UHItLHHJemO+WS8ohqeUN6OY2Fv88l:vVf5D3VZanFO3AG+y7U2HJp8ohoY2Fvn 		False
...
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id-9C354B42.[bestdecoding@cock.li].best 1.66 KB MD5: 26c3113b418a2d0e457ca6cdcd0dccab
SHA1: c1848acd652f763314f5bfba658c6c51e39cabea
SHA256: b396a4f830b54b78f7d84f946d41d61ed0d9d31d9460c795a4790b291ff6bc5d
SSDeep: 24:E23H+tGQzv6GSvTSA1Xf2coJVUWeu3EASH0rHJr4QaZuScQKV8cdOErnHqewM7hl:EHIAvhSv7AcojbJNAa4lZunZVz6ew017 		False
...
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[bestdecoding@cock.li].best 1.27 KB MD5: c6fd08f11e077b0022b8a88b2abe93f7
SHA1: bb98d7fb253a843459fac8ae746531a6ed59b9ef
SHA256: f484ded8058e85d043c79d7ee51fb781a652e8766e7056d33dd6b35b43a934aa
SSDeep: 24:9M5IollJFvwWNL3yJNKUOKaAPjt04mQ5U2DqkDf8nTNbKEqO7h16kxT3:aPJzyNKUBTmQ5POLEFO1L 		False
...
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id-9C354B42.[bestdecoding@cock.li].best 1.66 KB MD5: 21724d3c4b77501e57473a79513353ea
SHA1: e4c5f39bd003ad365f10d1533283e082810bbf77
SHA256: 36caed43ae88c2d121ffd8d910bf42a300835bd59e668521a6c99330b52a2e5f
SSDeep: 48:Y/lYbRpScWc6TxdRY/KmQQKUk4kfT1z01Acte/s1Zn:/3hSxr9Qvk4UTx0GyHn 		False
...
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id-9C354B42.[bestdecoding@cock.li].best 848.75 KB MD5: a81f8eaddd636848678c6f26726c1c97
SHA1: d21deb3c6b25f7f8dcb79a78c0f21a62e5180438
SHA256: 7bfda4d15b9c880e73fae341dd6dc39c2c221fda4c52c6b8e6670d14f590e379
SSDeep: 24576:ZvwfY9E3JU36UtDgbSs6ceMRRHT8X0Y3DuiMPUC:ZofiEZU35kbR58EGecC 		False
...
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id-9C354B42.[bestdecoding@cock.li].best 1.14 KB MD5: 8357b0afcb31766d87d4cce1443a6820
SHA1: b84062507792794ade519296a49922ff10e48578
SHA256: b1463cf26252f4a4e4180b4355f9a606953e96bf5d8aa0386743c28f1423f373
SSDeep: 24:o2O+BNdmbp1aU6G24UeLTCPereBX0lOZZJoKeTz7h16kxT9:o2FBNdmV1aUriPlEOGKeN1R 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best 4.33 KB MD5: f7807baa73f66381a9f2707302822215
SHA1: 8839093eaff917f595fc3ffde245d65193c3351a
SHA256: 75d0fa4fb72433777a21cbf3f13ba5a9c891a70a7a13513aaac76d377db58370
SSDeep: 96:aAfRILiBGxAynDWo4h+M7MmsQhNjRJjjPDFUkhJgWMnP3:aA5IVbn7jIjXLDFU9X3 		False
...
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best 10.00 MB MD5: 052b4a3aaf24e1879297e0f1408c7662
SHA1: ccf2d2087988828f8117c27f1ec3ccaf4b5b926d
SHA256: 6c23fd16b44e1eefdf52ac7ad99a1fc46a9b4b3e77c6643dd26d1ad79a2d1021
SSDeep: 196608:Vf1gRyjQR9g8YYIcjfXontQdQGzFZaGkGdN7p06H1JX/WanfW/OIV0h:V1WbR9YY5AJGBZWGRz1kaza0h 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.id-9C354B42.[bestdecoding@cock.li].best 582.61 KB MD5: 5526f1773c47e8261193a58df3cca130
SHA1: 5fb774b65ece43f704205b024ad684c08b73fc0c
SHA256: 3c053db2872d9aed3c355b0b250bb1836ff3e1938e304e9c446140d6af4e249a
SSDeep: 12288:Y5KTdhxIN9+0H4rVO2a1aRLuoRw0QxlV+fiiVV5GciSN8G/G9Q6GpdGadd8JrH+X:Y5KTdc0x0GdZJQxulGciu8IG9RidGadX 		False
...
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[bestdecoding@cock.li].best 4.42 KB MD5: 91d27c03eda37840c2a0cfabdbaa2777
SHA1: 20762f35702787d7dad2f60eeccec6b1dcda5f8c
SHA256: 49bef78978c8b157ef2b82823871d74c451504d44aa9af20f70a9436f7e05d7f
SSDeep: 96:GCH8Amxm72H07reFhRQOR6Nd5k84VR8uss0i5PN+h6N5xWyoe1l:Gxxm7ZreHR6b5k8yuri5gkV5l 		False
...
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best 6.33 KB MD5: 9e3d3c17ce7bb196c07f72c10b7556cc
SHA1: 00435ec43ae355293a7bc511530136a1d9086370
SHA256: 6ce55553c0a69abe98a5512d26b81bdbda9e058cabf6e17fcdd2986906714db2
SSDeep: 192:RmxHfmStFbT2T/jIiPGlSvUGudNZXrwkQ3:a/VFbS7PGEsRXhrwkQ3 		False
...
C:\BOOTSECT.BAK.id-9C354B42.[bestdecoding@cock.li].best 8.25 KB MD5: 0340081be7d1d55a9b41c2791a45031f
SHA1: 46aef4042852d0ad9c58dfaf877491394053a398
SHA256: e6edbce93a78166dfefeaeedd1a9bef38ea1b4d477ca1da1997ccaf46b811b91
SSDeep: 192:8LkjBAtoeSabI22kkBVzrq5dBN9AOCbZMdkOfW745:tjBAtI22FBNqdNWOqIfe45 		False
...
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id-9C354B42.[bestdecoding@cock.li].best 1.05 KB MD5: d759efce8137f479052240f10394f453
SHA1: 8e73431157219bb616bde2635aa949f86e5fe895
SHA256: de29c88443061d2dd4f9205ce23209fc89ef6f11b0274491b5d242443db73860
SSDeep: 24:kchNQl+zBAmwTnBuXsiWrbyky7DDj5VaKMwN0maS2cJ27h16kxTD:jAl+zBAmwVu8i+ukaDDjb10maS2H1v 		False
...
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best 16.52 KB MD5: d47d3f0af5361cdb3dca4c723fcbcb29
SHA1: 36c034867344ef055effff327637047eb40e2c5c
SHA256: b399aa9e897aea73c91d0b267fe413b31e1bfb8a0eca60bd110e6f79161a5cc7
SSDeep: 384:C/0sFIFz8pC7q4qqID0UcocJCH/3aWhjdIE13:k0sFIFACq5qIDzH/qWn 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML.id-9C354B42.[bestdecoding@cock.li].best 1.14 KB MD5: 92378f064d53f6fd314397f77a583360
SHA1: eeecc6a6eed2155743f6d4445314c1ff025e0e46
SHA256: 8bb208a131715ad4060efe3b29915be51e3fae4cfde33d7a7170c14f8f4e2cea
SSDeep: 24:6b/CvM/3G9Mq7emi9wwJmflv8B413uTZwNUCVkgeQ66K9USeUg2M7h16kxT9:1M/29V7iwf571sZwN+bQ66K9Uwg201R 		False
...
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id-9C354B42.[bestdecoding@cock.li].best 1.60 KB MD5: 6c07658622b3add461bf4862ce800b7f
SHA1: 7894d3bc97e540f5e8542c351abfc9b18362496c
SHA256: abdeaf0a91319381e43c2435dc66378194b5208de59e5e499a425f8e785a3d8d
SSDeep: 48:DhPMMcJu83f26HO2Y90NHAyQR4fPX4q9B1eO1F:Dhf2uW2/2/NfGg99/b 		False
...
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best 10.00 MB MD5: 3d0e1f18676626331ffefafe53b18248
SHA1: 80d370bf723a4b00b769c1a7266d63de82280ab0
SHA256: 9ceac29cec7a9772266c3c6ed68bc7f25dcb38c12c388fe9f21e58890e9cf26f
SSDeep: 196608:PFNUxdiOm1j3/abCsYwFOSQo2pWDOQs4hW6s63HS:qPmN3/abtYIQoROQ93RS 		False
...
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[bestdecoding@cock.li].best 865.24 KB MD5: a0e487a05a6f0732686de80fffb91feb
SHA1: 03b3d73e436626f24bbb2ada0d3d5bd0d1ef7640
SHA256: 10a9de985122a6c74c6e5a63404973ed83bcc31b4d9d2b3f7f600e9ef8df4df7
SSDeep: 24576:Jr4chPHMbT7DiL+UDZbeeTytrUqcogMO7:vPsbT7uFCDc/ 		False
...
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best 2.07 KB MD5: ff84dbbbaf2af09f292fb5dc7fbe20d3
SHA1: 421ba87deb85200b35df22e79696a929b2a609b6
SHA256: 0d40faaa460a87a6883e448248c07f8f4be2c6204240513154c36f4e2439dfb6
SSDeep: 48:qGhOgS8tLHgvC4r93eF6F2Lux0s8eqqVgTJnqLbMSl1pn:nOMLHgvXF2XCyHelVAJqLbrl3 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best 2.07 KB MD5: 2b6d01a23db690b7c79743b8f5d30013
SHA1: 55c9a8793ca6f4e82e7b45e322b2852a30e733b7
SHA256: aee40afe958dc55c8fb5c3163ebe63644d4c0f965db80e16028e36dfd7f22c0e
SSDeep: 48:GFEkERNKjPjtYqEGaMxClql2cGoylTA8g2fpixv4MDJAXzVohO1pn:gBTjtYbdMxJsoxH2fUxtDJIVos3 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML.id-9C354B42.[bestdecoding@cock.li].best 1.66 KB MD5: 3b6fa8ae33b7bec5e48e3abce2831379
SHA1: 5526c92b5a1fce3035822cf34be856371a676c63
SHA256: 5c430755b0ac9a50b92f1919433a7df4811fb93a1fb4700a885016d9e4beb502
SSDeep: 24:+kSU9cczNrjRKgGh1nbIdYNAcrqVQ6YREN8SDtua7hdbcJUQ/s2fwIioQFJ7h16C:fAgEVWvCUQ6yWZDXtFEUQ02aFf17 		False
...
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.id-9C354B42.[bestdecoding@cock.li].best 860.74 KB MD5: b081505e23954f35388d4ff9b8ffbbda
SHA1: 03f4b840302270a90f75cf5127f5035755ecd043
SHA256: 8155c35ca99b418d604357183dc489189250fd10efabed57adf47ef555bdb0c9
SSDeep: 24576:0vnzm6yD538/Ls7a+Iqz0RSjCpMRIOe3YqMOLuNNOe:LRl38/Loamz0o2pyeJMcuN9 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML.id-9C354B42.[bestdecoding@cock.li].best 1.81 KB MD5: 01823667b5a89cc8ff9fcdc1cd1f87b6
SHA1: 3f30a0c668f346e85dd11ccbd2707ea70bdbc9eb
SHA256: 67bb253efbea0d6e0ef459eb607d557b9253ed816c1a13fc2f1abc84be20db56
SSDeep: 48:f8Ma7VVGELBk8yhgHXHzTk9gnY0mOHTruP0mWKCu5K17:fuZ8Elk8yhgXJoIruP0eJ5Kl 		False
...
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[bestdecoding@cock.li].best 3.15 MB MD5: 49f93b48d95dc72d2c190579133f11d4
SHA1: 49f612dcac67ea5c5203e6b232bd1eb40f679264
SHA256: c7477c078cc0ce9c47c07d6b64a8d49d3dbbb56c2585bed5817aec06bae7b629
SSDeep: 49152:zDxL8QBonTex4S120ytJyiOYySNLAbrW/ri:zR89K1K/EQi 		False
...
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id-9C354B42.[bestdecoding@cock.li].best 14.94 KB MD5: 5c698f63f215eb441c920c05b59b866f
SHA1: affd7b675c12d0679cc4040c5080e48f784c72a0
SHA256: a2ef86325de109d09dd8f2f91286bc05fd2e980d2236acc3fd5e8d1abb10accb
SSDeep: 384:xxrvalY3j02rJT+N1F2spR6nSzEOQon1xReGxV:/gY3j00JiN1F2fnuES1vn 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.id-9C354B42.[bestdecoding@cock.li].best 5.67 KB MD5: cfa219cad4e8296ab18869924dd7274e
SHA1: 803a56e43f72758e7312d6a4297a146d18d5ca66
SHA256: 880c46e4ab34b504ad68eb2c98b87dd90277bdfeee7c9b1e12eb92cc746051aa
SSDeep: 96:o0M6MNKPXRXyKLn9pw+4gPHLUwTuaUeySdyZdI3nejXGqI4CAwNuLZWDCeFXj4Oj:86MyXRXyKh+4HnZ+1kuX8EWGehsOLHP 		False
...
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[bestdecoding@cock.li].best 10.00 MB MD5: 4fb6c079967f604d4b8cdf477caf6de0
SHA1: a8777ca0e49e5d98d01a6b007c7b62b5dffb5b63
SHA256: 9fac05c1ffc4b8060b0a5b942d35cc90c0bff012af1a00a6712c6d03018b083f
SSDeep: 196608:MaurJM4k8IMj3kMxfGbWaxJMKMA4JxuiNQG3A2r7rfiSFhysD8uxDxKj:EOn8IQkM2BFEx96G3AUf7FnzKj 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML.id-9C354B42.[bestdecoding@cock.li].best 1.44 KB MD5: 4c305987f8adac3347f8b606a976e709
SHA1: 85aa942a6164a235507d82546f8402534586cda3
SHA256: bfeed09dc3691121de1253d8895d0d38f3e585f6a72b075658c0134ff64619ad
SSDeep: 24:yL+UwoZf8TzvOluubYRr9JY5+pi2zpMNm6X386Ftytigt9JhL67h16kxTZ:IP1dWLOk1RpJY5+pRzpMNm6XPtyoO9Dw 		False
...
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best 9.37 KB MD5: 7e8dfac818c1c280f94835db9df4edbf
SHA1: ee7281eac96282ff9c7dd02138de66fb37d67816
SHA256: 4391b09ff9c1220e4eb6b44ea9f80db5371357f6d156f1117570e8de643fd126
SSDeep: 192:leTXRlMcsP+SylAeu6PH4q5e3Gil5Ss3lxnZlB1J/CVi3:ILsWS6H4qEGSZlB1lCVi3 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best 16.52 KB MD5: 0d42c58184399aa5535f065d05be17f0
SHA1: 628bab7154e5e68f11db5fe1dfcbdbc1695b46e5
SHA256: 338a263af0aef4d4d4e266e8633fa770cc4f2f86f4cdb66eb0ecba4c69e857b2
SSDeep: 384:hmG3ktedu/F9edb/kJti8gla5E4F6xOOLfDAv7C2WQ3:sqK2E9eFkElEE4FCOOL8lWu 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best 2.07 KB MD5: db91c6cd966a7b12dfeb813897c8903a
SHA1: f60f4ca080d02685e3e32185b29ef9dacfb0be1e
SHA256: db31490bac0d769d62a7c697c3e5bd4577ff38c3d70ec0ca1134b62e01c6f827
SSDeep: 48:5L40LuTHQqcX6xusdkairWI2pPSWfW8s59CZZJmjRHqr7s1pn:5jSTHQqcIwIpaWu8sDQoS7s3 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM.id-9C354B42.[bestdecoding@cock.li].best 69.80 KB MD5: 5b692de7544425ddb24e8bd6c57c08fd
SHA1: 772313f19d58dbc496c4c4d8315d28dc0c55aaa6
SHA256: e96f639a6247b04f34e632aa8733354785067512c8ae55628ac26d76f0dba670
SSDeep: 1536:Bhyb6p5+qm4RS2G51bnsOOUJPlGFR5XyZzy4h30K7GMfHzGY8GMJpI:SOpQqm1rzFJdG/5WzTJGMHzkvpI 		False
...
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best 5.97 KB MD5: 3c5ec051b59ba549b7cdb2456b695890
SHA1: dfc21c93aa078272447c4446fe7e70b073a34fe4
SHA256: 5400ecc09a8e84ad5f95a4afd19a89633e8c94b73d90c7b2504f8189b28b4be2
SSDeep: 96:WM5AbSz0U05xugCT1HoZ2f1hQlTZqyrhJeKt/BjRBTThQgalkebEPXCLq+bid3:vAO0F0XHY29hPyNJeKtpj3Tulk3PXIqR 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[bestdecoding@cock.li].best 65.85 KB MD5: 7ecdc9f6c88ecd5d50eab63f74b42d23
SHA1: 69b616c42da617fff10abcc106d373a14e8650b4
SHA256: 0e798b76a87ae87063850eb16d6df496dee535ef2a4650c1b552a4a7ad8783aa
SSDeep: 1536:iYO0n8h/+okpMx6NjwnfaOfeSfBYxYpox6AJMp:iYwondwfxBYUsPc 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[bestdecoding@cock.li].best 2.35 MB MD5: ce47c2da8c249973aadaf7d87d4cb0a5
SHA1: a4735f42f315e5d2e86bc0366c3dc99f6b8dceda
SHA256: f1c53675af3c93541be39ef8944ad4558948ee940d56831e3c14ee6a9b341a1c
SSDeep: 49152:R0opH/cgHa3HRxz+4gQnxm350WkNopZc1DFWmv4:R0op1Har+0w3WWkN4Zcymv4 		False
...
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[bestdecoding@cock.li].best 10.00 MB MD5: 6b078cbccbab0d5edeaa1d85f11ba58a
SHA1: 66820f091ea72f244d2d2019748cbda0b7b9702d
SHA256: 7597007b7fd82fa6fc079ad255cc80561c20be4bc515df7968b4b0e377292774
SSDeep: 196608:H4KKCX5FvaeoDcBdxmOJR7nxOKOmE7dzaNQwr:H4KKCX5FvaVczxmUJnYSE7dzAT 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best 2.18 KB MD5: 57d83107b197af0d07608bca51198738
SHA1: 37aa71f7362c5a8aa280ca8873033166769e970f
SHA256: 7f8f25cad1b05a56f565fece5627964fa35240c35c3ecd4e02a02e48316e5c44
SSDeep: 48:J9uOarENS5SXBcwtl3zTtHcTESFV6GSWFRXrpcWxzGYjn48Um1pn:JOrE456BBtlYL6GXXb29YjnQm3 		False
...
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id-9C354B42.[bestdecoding@cock.li].best 582.61 KB MD5: 9d19139c6e492eebbf5ee658c6b6cefe
SHA1: ea05da37738f80b85c46f34140adae18ffc00e94
SHA256: 02fa696e3ffbdaca1dc950969a0e19c9be602b25cafc9404220a8815ec5682a9
SSDeep: 12288:KGGpJJFm+vLeH/HJbdS/73rNv1/+dKNge3//w+yj+C8aINO:8xU+jgxdS/73rBp+dKN/nwPj1uO 		False
...
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id-9C354B42.[bestdecoding@cock.li].best 8.76 KB MD5: 1cdda9c45ce9a8a7b857eaeef240a284
SHA1: 44eb0d5cc63ebd816d43c106119023ab0af27728
SHA256: 12511157309926479c349e6480ac0947f3b11ae6c08b040b962751a2349d520d
SSDeep: 192:iYk9bVZGpj4qPtwAo9AqpQ/IFn1KStOefIEdwYfgSp/OQswUwt1vTV5:FWGpj4q1wAo/0IpsOhdwYfJOQsCB5 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best 2.47 KB MD5: 26c58b803ea44c8015226878378b00e0
SHA1: ea5f4999095010f7dc4a5d79f433c6bd7964e4fa
SHA256: 2c9cd2f9df6131a65897eefa87284f6807d0b2773af8e063b46fd3bb15a14bff
SSDeep: 48:idkS3PGneFgy9VHhMfdAFrr1pfVPhI32jL9NpXqTK7kdFz1pn:idkY2yvBhrr1ptPhGMJLqW7+z3 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML.id-9C354B42.[bestdecoding@cock.li].best 9.51 KB MD5: 9d3d71808e4c678a660c750c1d9e0ded
SHA1: 942e3ee1842e2a47c9eae0327d6e9cee3869700a
SHA256: 0765d4c2b661cbd72098d7096644423b8da3cb2219321b751d6c776f40e77438
SSDeep: 192:co1miLJgIUL2qESHzMaTbdG2aZHj3sYuwHLohw+6UW43nZO5:ZJULBE+Q2aZw+Uwnr005 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best 30.60 KB MD5: bb91177054fda8efd7d7b8a554248c3c
SHA1: a40f1f9564450e6a69e622144469232d4a3255df
SHA256: a6743e041e8e50af7d5ca65cce5e63b8a10015af0e50061dc6fce335c2eb5151
SSDeep: 768:eAidfdGg7pHv28P3sAcODZzRAqAv2NnMb35V7:eASQSdv26sAcODbAqA6nMj 		False
...
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id-9C354B42.[bestdecoding@cock.li].best 1.99 KB MD5: 697649844877232a958bcfaa6e351b00
SHA1: 1bb99eedb9628da2d879abb7a9c07a6c942f79e6
SHA256: 3ae4e24dcd0f238b16f3a89602033587e1cfe96ba9d9aeed181f8710d12ce396
SSDeep: 48:Dj2pjKOnGkJBuUIygma0XM7xK0j1xQoErVkTfjfCpNeN519:DjEGkJBdIUkRW6Tfj15j 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.id-9C354B42.[bestdecoding@cock.li].best 1.76 KB MD5: d59cbb4ffda1300e158206e06f24b71f
SHA1: 718a82ee79c989b28aed9e4dabae5416179f6cd0
SHA256: 31559f098cd6b0befdbeaabc91ed43c17f54d3dd1cf7979d68ddb2acf44fbd01
SSDeep: 48:7gwTmZglD1PjpsbrDK3QscAXFP+m3gkCljbl3go3N1n:c8ugZBp638QIF+zkCl/l3gc5 		False
...
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id-9C354B42.[bestdecoding@cock.li].best 1.03 KB MD5: fa5040facbfb5d5447080e87ab9d5fb8
SHA1: b73bcd8aa64a74f51d12e4a2ad29e1de33062183
SHA256: bda9271576c9ce3fc60837cf8c876a5a5f687421f379ef2b8d9293fdc9eb69b5
SSDeep: 24:W5vr2V3WhLWjDCGC12ZH9ZmYHqqxoel7h16kxT7:GrC+Lk2GCEl9/oer1n 		False
...
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best 10.00 MB MD5: 42ac6eff5aa1dad153cb32ec3d616e43
SHA1: 8d8693b1d4aa27f2f48345e6f2e760c5f205d163
SHA256: b8984acb419b90aab0f7fd9addaa90b10847e75aeaabfde74fc133085adf3455
SSDeep: 196608:Yu6eDsIwHBL4B9lCzT2bOgcDuihGYrLpVUBJ/7HAFGtNy6aMhnRTU+:WqsIwHNB26gVE7e/7JNMM5RTU+ 		False
...
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best 2.07 KB MD5: 5bee47324d035fd5936e34e099fa98af
SHA1: a996447818715fadf8c10275160818eb506b887a
SHA256: f8a89acc0bd32a8fa0fffa9579accea8449b7407a8e34ff67c44630f886e9398
SSDeep: 48:XZ0R+quWW6YX/gIDiCyv34xgCs3CGXv6pntaHBkct1pn:OR+mOgzCyv3ys3HfWcHBkct3 		False
...
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[bestdecoding@cock.li].best 3.48 MB MD5: 065839460f5041f7b02e65d48dacf701
SHA1: 67e62761cd379e023b02153e24371140e324d051
SHA256: c16b3e2a302862a866a4ec2eb200d107500b990d3a085105ebe6ae11a343bc5b
SSDeep: 49152:fHYLL/WoWLljb1R6rOSN20yRJ6zIIXjKiQRIn+F:fqLVW6vHI0jKPRI+F 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML.id-9C354B42.[bestdecoding@cock.li].best 1.66 KB MD5: a5957a4c95141094ad72f842a10fa695
SHA1: 0f8dd3a0e7ce8fac313112a21c898940c5f0f96e
SHA256: 7be6ee8e046ad72068db9ee950d3523d67ae5ba1a0f6d6ba912a5387dff4c8a2
SSDeep: 24:F5bdpQ3R/HfG0aNXw9ZIMMoV9NYbA0CEwSBldxc8s/Jz9VX3EovjZJIYtIm7h16U:Xgv+0YXGZi29N56lElvX3Eobdtl1Zn 		False
...
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id-9C354B42.[bestdecoding@cock.li].best 65.85 KB MD5: 7be62df305e5ebabbff77e9577cbf038
SHA1: ff034dc1f500b53f9f6f35e5953c20b28e405ab1
SHA256: f90421c25854104e68a040cb42ab460adf532252667afc5ca73299312900d624
SSDeep: 1536:10iaD+cQcdy8N2j/7g8B8ZqS7jmao6oMeug2ayXxMDhWPs76:HaB3y+2T7g8C7CaoDMeo5MDo 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML.id-9C354B42.[bestdecoding@cock.li].best 1.66 KB MD5: 1b712ff7070da9ae2c0231b7809ddd9f
SHA1: 4c770103d9705fe017d8843b3c20ee7c1e5b37d1
SHA256: 3dc8490bc17e9459069f77c6632fdfe0870f92689e733ebf35015384e3161521
SSDeep: 24:ZTZRgkFGOX4SKPXfh5xQ+cxPiNgvCC2ZW/NqEejXmgHnzoCeeTdFgl/m4uL7h16+:ZafPPhYtiNLCU4NqlqiFgle4uZ1v 		False
...
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id-9C354B42.[bestdecoding@cock.li].best 16.70 KB MD5: eed4893654b1783546b0a5faf54ae309
SHA1: f7a3f75d5b6df8c3b2175dcea36e096e61c41c74
SHA256: cd5d69dfc02ff7f3b4252781e396dba3d5c247a7a8c55ca7f61af0b84b26378f
SSDeep: 384:LiVsMdvfTlTudgfvOXOA8yTnWpgCNDK+IL8nqPoR18cm2Jabl:+s8dMgfvUxWVWzkqQR18cJJaZ 		False
...
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id-9C354B42.[bestdecoding@cock.li].best 26.79 KB MD5: 2e2ebe7881d93356bad08399609c5dba
SHA1: 7d5936e9e1768f747a534b0ff241dec2529db7ad
SHA256: 7ff0ffdbf4ab10ec2a4c08e8f93244d55dd41fe6d9b3000de54544289d336e1c
SSDeep: 768:ZiYEH0Tn7bOAeDYtm1LeOQUZkcekSeVwAcH:stH0jmAbm1MwA0FU 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML.id-9C354B42.[bestdecoding@cock.li].best 4.42 KB MD5: c25bb899107764cfd7d45fbbf329d0ce
SHA1: dca55257c3602d870035d74672596504cd6c8a3d
SHA256: 4566227a138118532fb5afd48695a9ca2209a5ffc40d3797a741645b63f5252c
SSDeep: 96:jc4BHHgWikr2+bZqfLLmF1zWXWTIe+3wKvgP05jOZjPkL+nhc7n3ny+zG30sl:jdHgWiFfs9WG0Tuh5cghPUG3/l 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best 20.33 KB MD5: c746773d48fe5e7bf7f51f9147cd3ab6
SHA1: 25799ea4ce8a7b55fee8da8c7f528f210ef5cf6c
SHA256: 4744989c5fdd41bc0e45bd6e90b81f94c2f8ab63a78e04f18414a90918029355
SSDeep: 384:8FdtHCpWZP//crWafPGGGrMF4+fbdZLd1CavI7pOJ1WwRgfb8YWtwn3:cdtHWWtcrWaXXGoF4eZypWWwRgz8YGa 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM.id-9C354B42.[bestdecoding@cock.li].best 37.04 KB MD5: 7ab6db726d04e4cd77122bc9d849522d
SHA1: 1004b211a170996b4ffc6793f9cdb1cb5ed79739
SHA256: 85d3ba722b7ad7b01bce8a02af80cc7f09ecbe4d48ae17d35c2fb1209a7d64dd
SSDeep: 768:0Wg3S7tdtQW4NpljfmOwmfuVxyCQK/Dhcf7K2jUz+GYo:X7tdtF4PljfNnuGCQ8Dh8jUaro 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[bestdecoding@cock.li].best 6.51 KB MD5: 4419d0f395b252bdc9243f72bc6e71d9
SHA1: 4b14939b31d85f24a51398c23211eeee9de135f4
SHA256: 74787bb03d5ecdc3911dad4bbceebb1ca21a86030986aac3d23145eef6575c9e
SSDeep: 96:3YAv7u2Ck4xU5gaIHM4r5lZVjzpM/BGHZ02Baw1j62RyPHrPNZp52LYXAQhHPLjx:f7Rv43MgzsWJawx6xPHjNZVXLhHPv9P 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML.id-9C354B42.[bestdecoding@cock.li].best 1.66 KB MD5: f48580540f0c4d08e89dbe7f0de3a276
SHA1: 6966678ed6d595dc200eb1517310aad13dc3e90b
SHA256: 65da57e20746011733b8a1c3d8e4755f950ddbac6ad0129d45ca806f767d9e95
SSDeep: 48:zljJ7PrBEdbPRExj+kdH73C5MzdXgAiJPHZpAY1pn:z/BE5ix+kB3CSzdQr/Z/3 		False
...
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id-9C354B42.[bestdecoding@cock.li].best 1.66 KB MD5: 9d6a114092b04e37604d055ac6c1ade9
SHA1: 1d2c71d3c2a3e445f3861a97b200109b49b929d9
SHA256: db6af2211b379dd154a82fdcf8e2f76bdc8659c66204553f0db7836045d43115
SSDeep: 48:R/rT+4Of2CSDXG/WxW6aeOyj0lskg87AseNg1v:Vra4hu6H6PAlgx 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.id-9C354B42.[bestdecoding@cock.li].best 1.60 KB MD5: 37b930c4dfe6d78e1aee2d8f7a1f6276
SHA1: 0e692f68aee3a95420b2afb201786d6ab4eedabb
SHA256: 8d59a11735435b8d5db30633fdf1d0734090f367f25a40f04895747e9569da45
SSDeep: 48:JQfQi/KAjzPzHxqTqiKpNIkf/RwGvfNe1/M1F:ufQi/K2zHxm2+2RlaMb 		False
...
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[bestdecoding@cock.li].best 3.16 MB MD5: c06e3b585b84fd4467cd15aa730abe83
SHA1: def9eb99fbc40f86b538087848671100eafb7b04
SHA256: 1d106a5b2ef61dd1cbdd47a9fd1c99b1a2bc380895907229c6d3cc207b7314b9
SSDeep: 49152:zDxL8QBoSTex4S120ytJyGMPsGzNBJ0W/FCk:zR89r1z0GvCk 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML.id-9C354B42.[bestdecoding@cock.li].best 1.99 KB MD5: 32ba85fd44425b8e77f9ff5811473a55
SHA1: 025f47e85f37f76438005716bcdf045edbfbc8ee
SHA256: 3846fecbfbbcc16136a0fef552c78e41202591a112157069b3248b8509ab485a
SSDeep: 48:FxNNPzkfnQB721L4jJFUxZstdQUk68gBKjZxeJpMY319:FxPQfk2+JFUPsjQF6KjWD3j 		False
...
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best 1.65 KB MD5: 75664d8502fd916272dcca5af5bee4ef
SHA1: 2283dbba6e899b2eacb77791ff3a8b972eada25a
SHA256: e28bc50a3dc2d42269e4935a90c3ad92ed44f017e5c0b8007384f3d20ba9eb4f
SSDeep: 48:vtQqvQP4LqR7bOBTxbmoELGhv9CCSVMWdT1pn:i1PLFkTxb4LgYfM8T3 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML.id-9C354B42.[bestdecoding@cock.li].best 1.55 KB MD5: 920916f3238183d11acc25bb3b596d20
SHA1: a6a17f5d332c2f5a0fa414d2b01ad005ea95ed5e
SHA256: b2cc7ec81c7bd93ec7be6907b5f3bffe45691cbd28b3c8aa267255210beac9ed
SSDeep: 24:IskDrg6pv8RynbCXxGYLctprBGOskA1SIOxaKcr7lfW+Vfjer7h16kxTVn:A6vh/LMBXsnROx1+fWkfjo1pn 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best 2.80 KB MD5: 727ccaf754106136da550ee8d86079f6
SHA1: 6b55f6a5dbd076865400920c6d0a271d511b92e7
SHA256: 0bfd5e74eb17c71efeec025e13f3c70beb78d7dca0d42c461fefcad6ea28122e
SSDeep: 48:7wB3kjiLIP1G0B1MKMlptWP/Sn7MPX12waeR5MFiLYnv/s4nTFAL1RONZrs1pn:7k3LLIwgMK87WG05uiLYpTFAL1kw3 		False
...
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.id-9C354B42.[bestdecoding@cock.li].best 1.27 KB MD5: 9792664cd5ec046b0a34823d03c7b1a9
SHA1: de6c08bc44f90a0f9b613ebcb355fbd941bbf723
SHA256: 60f201b1ea743d4be82a3fd441fee1dbf34c7979608948236672842910aba942
SSDeep: 24:khyTHmWpGZDNLRNiaSmGPck5zwaz2muRoNSAKYy1t3RwWJKN9u0RK297h16kxT3:ZTHmWpGNh0QGOmeAByLRHsuaJT1L 		False
...
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[bestdecoding@cock.li].best 10.00 MB MD5: 7a0bf4599d9d7bb54d127556825c2535
SHA1: e1d1907ccd0f8ac9eb2ea2e7c53d6d13ae23e2b4
SHA256: bebaec80c6357c3c4cf4e55cdfa1893e274ffb3211e093f47d9a470fe26e3eb1
SSDeep: 196608:aPUvTYpH9RBl/tus7o4L7tZiTnp/jE4U/bxlLRx+bFUnJ:MUvTiNhU4L7tZiTnprP0txRsbFUnJ 		False
...
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[bestdecoding@cock.li].best 853.75 KB MD5: 39951fcc2677a2b65acf3c968d44e9b4
SHA1: da968ebc1decde4e1ce166ce361802107b558454
SHA256: 152522f77329014cf98360ea1d86860144326e48a56d6b1fdca4d941c58f017c
SSDeep: 24576:4I/LB5UX1HBVll29RA46V7wodH6eJ7Tt/1ySfEPiqxgdE:D/L/kBVWLx6V7wod5ZtynPiqxOE 		False
...
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id-9C354B42.[bestdecoding@cock.li].best 1.66 KB MD5: cde808af1497e1794c577b3bf5bfadf4
SHA1: 7852b2af63ec49db60eb303d42c03d4611b7803b
SHA256: 35f0cdd35f8dfbcbb62a900bba0d813db8784a1ff2f479810294514f33bec9a4
SSDeep: 48:79JIo4qmwVeJTzJDljy/mGMhV3nJCH1J1pn:79ivjwezjyoV3o/3 		False
...
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id-9C354B42.[bestdecoding@cock.li].best 6.51 KB MD5: 81dc0a77a0d0a92b32f8a20ec8b900e2
SHA1: 417d1e3694a8d1562964983ddfb48a472afda7b6
SHA256: 8f8c9998cbb36e90cf633976ef342cadfa1d63d59df5d89e6734ca32825f7b9e
SSDeep: 96:Y6uW5YtGzBHFXWe4jio4bOtnRRdj2fdJX7XrygNkpcnCvorZs51C529qFN64G9hP:Y6NGtaHFGBBCOtHA/XegNkpUCtXO0hP 		False
...
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[bestdecoding@cock.li].best 5.67 KB MD5: 807dd2669f8f3282e64e40979c8b680e
SHA1: ddd4a2322cc3808958f668f37276ce14a93d4e30
SHA256: 074f54c4ff305b229baa34a8b8436474db0270568c393e18f528d6b23536423c
SSDeep: 96:0TYfT5O9uG4KSQiYAjGwWI4Wqhc6faeYO25q0C16N6hcd5Z7sZoIIAWscGPe4w/9:k9uGLSwAjGwv4WJkSq0Ucd5Z7sZolAWt 		False
...
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id-9C354B42.[bestdecoding@cock.li].best 1.56 KB MD5: 2942dbff27613d774ace2d880c87f866
SHA1: 2611013af183c10e7ac20b94dce05579090b5846
SHA256: 7b16196472bc3ba2c3f895c1aff3166489765b2f22b51cd732f39a2fce6cc3f6
SSDeep: 24:dINAZlp6pwwjUJ7cDW88Xw83YHSDnRN0oEjmUy3Ih2tvIAjWSeb7h16kxT9:dICYy7ciJ3Vh3IAIAZeJ1R 		False
...
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best 2.60 KB MD5: 981d899685282e156a4aea97b1bcc789
SHA1: 77f8bcc422b0c640a7c620ed0da5793da4f423d5
SHA256: 92de8b521e4c6dd523f27e42ab24eeadafb46896c8d8100fa782a2169a148e96
SSDeep: 48:OFB92lPp3ECgm2FLRAx5/c3/A3BJxN8/URPZub1pn:Ol2lh0FF+2YRV8uub3 		False
...
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[bestdecoding@cock.li].best 3.21 MB MD5: 3b49a302421bcd419abaae11bc234a8a
SHA1: e2e99efda0fc29be615d144f62feab00301e9eba
SHA256: 86f8975c97c30bbc757195813f491a6c62b0e8d3509ce541939634f58c2ad417
SSDeep: 49152:AeFNMMFrwnbddIOxFOSOwPFhbYRjfIDPHLoBTv5oJBB47q5FqciUlMfP4Yw:zDMUwxyODPFhbY12HLodiF4+5riw 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.id-9C354B42.[bestdecoding@cock.li].best 1.05 KB MD5: d49a4f4806d487722d4ffc2f6ab0f303
SHA1: b46c40af783433f92ce8b83f46624e85bb6408bc
SHA256: c0db4a1a562dcc5db3c155f4920fc4655a1e83b71c623737908005709320385d
SSDeep: 24:O4/vVx79Pf37efZErb3ZV9f6K6QaagZMS2u7h16kxTD:O4/N7/76obpXfyQaagZMS2u1v 		False
...
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[bestdecoding@cock.li].best 10.00 MB MD5: 0132354deb06c352353675fce278a129
SHA1: 82f447263c0d4d83d398af15034413083edcbc35
SHA256: 8e5451128ff68d309300dd54c2a3bb83f196e6fefb39f1e8d6b7c24b8a6f7307
SSDeep: 196608:TIwm3nNVAl+ig71eZ8FclBElWHEbyLbyo9crpLlR8ioLO0ZF9CrpbQ:OL71eiFge/GHyo2rpLkcoCrpbQ 		False
...
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[bestdecoding@cock.li].best 3.14 MB MD5: 33462d83cff0c8d3221a001e25acabc2
SHA1: 647b03ee0315454aca3f0a6b0176781e962251e5
SHA256: d578889ac3936128198eea6ed9de2d39c6b0eeb491e3172e5a79089a7ad08d3c
SSDeep: 49152:zDxL8QBo0Tex4S120ytJy9tjAvNZ/4LL2b1vc4:zR89t1FyL/4ebJn 		False
...
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.id-9C354B42.[bestdecoding@cock.li].best 26.79 KB MD5: db633ef2e789bc7eedee3b330563aa40
SHA1: f816cd0ff76a2de3b1f11f4dc9c35132c08b3f77
SHA256: b81e2dec7cbdad7461fcc103cfeff71084da501baa6de3374a8b1cd1be38f821
SSDeep: 384:dkx+QbX2K/yxRoupBHIJyBEo6by7wjzKxfOm83MCxLwj+MRE+Vk3oGywGAYsF69Z:G0In/WBoZG77fKcCxMKWv3iGAYd6K 		False
...
Threads
Thread 0x680
183 0
»
Category Operation Information Success Count Logfile
Module Load module_name = USER32.dll, base_address = 0x771d0000 True 1
Fn
Module Load module_name = ADVAPI32.dll, base_address = 0x76f90000 True 1
Fn
Module Load module_name = NTDLL.dll, base_address = 0x77a40000 True 1
Fn
System Get Time type = Local Time, time = 2019-01-23 21:44:02 (Local Time) True 1
Fn
File Create filename = \\.\SICE, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = \\.\SIWVID, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = \\.\NTICE, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
System Get Info type = Operating System True 1
Fn
Registry Open Key reg_name = HKEY_CURRENT_USER\Software\Wine False 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__ False 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = GetNativeSystemInfo, address_out = 0x773d10b5 True 1
Fn
System Get Info type = Hardware Information True 1
Fn
System Get Info type = Operating System True 1
Fn
Module Load module_name = winmm.dll, base_address = 0x753c0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\winmm.dll, function = timeGetTime, address_out = 0x753c26e0 True 1
Fn
System Sleep duration = 50 milliseconds (0.050 seconds) True 1
Fn
System Get Info type = Operating System True 1
Fn
System Get Info type = System Directory, result_out = C:\Windows\system32 True 1
Fn
Debug Print process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\1.exe, type = DEBUG_STRING, text = %s------------------------------------------------ --- Themida Professional --- --- (c)2012 Oreans Technologies --- ------------------------------------------------ True 1
Fn
Module Load module_name = NTDLL, base_address = 0x77a40000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtOpenThread, address_out = 0x77a61128 True 1
Fn
Module Load module_name = winmm.dll, base_address = 0x753c0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\winmm.dll, function = timeGetTime, address_out = 0x753c26e0 True 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000 True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000, value_name = DriverDesc, data = 83 True 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\Hardware\description\System True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Hardware\description\System, value_name = SystemBiosVersion, data = 80 True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Hardware\description\System, value_name = VideoBiosVersion, data = 80 False 1
Fn
Window Find class_name = OLLYDBG False 1
Fn
Window Find class_name = GBDYLLO False 1
Fn
Window Find class_name = pediy06 False 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77a40000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x77a5fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77a40000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x77a5fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77a40000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x77a5fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77a40000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x77a5fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77a40000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x77a5fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77a40000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x77a5fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77a40000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x77a5fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
System Get Info type = System Directory, result_out = C:\Windows\system32 True 1
Fn
File Create filename = C:\Windows\system32\ntdll.dll, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_SYSTEM, share_mode = FILE_SHARE_READ True 1
Fn
File Read filename = C:\Windows\system32\ntdll.dll, size = 32, size_out = 32 True 1
Fn
Data
Debug Check for Presence c:\users\5p5nrgjn0js halpmcxz\desktop\1.exe True 1
Fn
System Get Info type = Operating System True 1
Fn
Debug Check for Presence c:\users\5p5nrgjn0js halpmcxz\desktop\1.exe True 1
Fn
Debug Hide c:\users\5p5nrgjn0js halpmcxz\desktop\1.exe True 1
Fn
Debug Check for Presence c:\users\5p5nrgjn0js halpmcxz\desktop\1.exe True 1
Fn
Window Find class_name = FilemonClass False 1
Fn
Window Find window_name = File Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Window Find class_name = PROCMON_WINDOW_CLASS False 1
Fn
Window Find window_name = Process Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77a40000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x77a5fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77a40000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x77a5fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Window Find class_name = RegmonClass False 1
Fn
Window Find window_name = Registry Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Window Find class_name = 18467-41 False 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77a40000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x77a5fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77a40000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x77a5fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77a40000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x77a5fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77a40000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x77a5fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77a40000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x77a5fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = cmdvrt32.dll, base_address = 0x0 False 1
Fn
Module Get Handle module_name = SbieDll.dll, base_address = 0x0 False 1
Fn
Module Get Filename module_name = SbieDll.dll, process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\1.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, size = 256 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = RtlAllocateHeap, address_out = 0x77a6e026 True 1
Fn
System Get Info type = Operating System True 1
Fn
Module Load module_name = KERNEL32.dll, base_address = 0x773b0000 True 1
Fn
Module Get Filename module_name = SbieDll.dll, process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\1.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, size = 512 True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ True 1
Fn
Module Create Mapping module_name = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, protection = PAGE_READONLY, maximum_size = 0 True 1
Fn
Module Map C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\1.exe, desired_access = FILE_MAP_READ True 1
Fn
Module Load module_name = imagehlp.dll, base_address = 0x772d0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\imagehlp.dll, function = CheckSumMappedFile, address_out = 0x772d8303 True 1
Fn
Module Unmap process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\1.exe True 1
Fn
System Get Time type = Local Time, time = 2019-01-23 21:44:08 (Local Time) True 1
Fn
Debug Check for Presence c:\users\5p5nrgjn0js halpmcxz\desktop\1.exe True 1
Fn
Window Find class_name = FilemonClass False 1
Fn
Window Find window_name = File Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Window Find class_name = PROCMON_WINDOW_CLASS False 1
Fn
Window Find window_name = Process Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77a40000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x77a5fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77a40000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x77a5fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77a40000 True 2
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = RtlAllocateHeap, address_out = 0x77a6e026 True 1
Fn
System Get Time type = Ticks, time = 106330 True 3
Fn
System Get Info type = Operating System True 1
Fn
Mutex Open mutex_name = Global\syncronize_6LSDY1A, desired_access = SYNCHRONIZE False 1
Fn
Mutex Create mutex_name = Global\syncronize_6LSDY1A True 1
Fn
Mutex Open mutex_name = Global\syncronize_6LSDY1U, desired_access = SYNCHRONIZE False 1
Fn
Mutex Create mutex_name = Global\syncronize_6LSDY1U True 1
Fn
System Get Info type = Operating System True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Module Get Filename module_name = SbieDll.dll, process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\1.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, size = 32767 True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x773b0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x773dd650 True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ True 1
Fn
File Create filename = C:\Windows\System32\1.exe, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, size = 1048576, size_out = 1048576 True 1
Fn
Data
File Write filename = C:\Windows\System32\1.exe, size = 1048576 True 1
Fn
Data
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, size = 1048576, size_out = 738816 True 1
Fn
Data
File Write filename = C:\Windows\System32\1.exe, size = 738816 True 1
Fn
Data
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, size = 1048576, size_out = 0 True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x773b0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x773dd650 True 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run True 1
Fn
Registry Write Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run, value_name = 1.exe, data = C:\Windows\System32\1.exe, size = 50, type = REG_SZ True 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, value_name = Startup, data = 83, type = REG_NONE False 1
Fn
Registry Open Key reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, value_name = Startup, data = %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup, type = REG_EXPAND_SZ True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x773b0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x773dd650 True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, size = 1048576, size_out = 1048576 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 1048576 True 1
Fn
Data
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, size = 1048576, size_out = 738816 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 738816 True 1
Fn
Data
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, size = 1048576, size_out = 0 True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x773b0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x773dd650 True 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, value_name = Common Startup, data = %ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup, type = REG_EXPAND_SZ True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x773b0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x773dd650 True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ True 1
Fn
File Create filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, size = 1048576, size_out = 1048576 True 1
Fn
Data
File Write filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 1048576 True 1
Fn
Data
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, size = 1048576, size_out = 738816 True 1
Fn
Data
File Write filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 738816 True 1
Fn
Data
File Read filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, size = 1048576, size_out = 0 True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x773b0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x773dd650 True 1
Fn
File Create Pipe pipe_name = Anonymous read pipe, size = 0 True 1
Fn
File Create Pipe pipe_name = Anonymous read pipe, size = 0 True 1
Fn
Process Create process_name = C:\Windows\system32\cmd.exe, os_pid = 0x20c, startup_flags = STARTF_USESHOWWINDOW, STARTF_USESTDHANDLES, show_window = SW_HIDE True 1
Fn
File Write size = 65 True 1
Fn
Data
Module Get Filename module_name = SbieDll.dll, process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\1.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1.exe, size = 32767 True 2
Fn
Thread 0x138
92 0
»
Category Operation Information Success Count Logfile
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Thread 0x63c
14 0
»
Category Operation Information Success Count Logfile
System Get Computer Name result_out = XDUWTFONO True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 13
Fn
Thread 0x708
109 0
»
Category Operation Information Success Count Logfile
System Get Time type = Ticks, time = 107219 True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x773b0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x773dd650 True 1
Fn
System Get Time type = Ticks, time = 107359 True 1
Fn
System Get Time type = Ticks, time = 107500 True 1
Fn
System Get Time type = Ticks, time = 107640 True 1
Fn
System Get Time type = Ticks, time = 107765 True 1
Fn
System Get Time type = Ticks, time = 108124 True 1
Fn
System Get Time type = Ticks, time = 108607 True 2
Fn
System Get Time type = Ticks, time = 108732 True 1
Fn
System Get Time type = Ticks, time = 109029 True 1
Fn
System Get Time type = Ticks, time = 109637 True 2
Fn
System Get Time type = Ticks, time = 110183 True 1
Fn
System Get Time type = Ticks, time = 110542 True 1
Fn
System Get Time type = Ticks, time = 110854 True 2
Fn
System Get Time type = Ticks, time = 111088 True 1
Fn
System Get Time type = Ticks, time = 111618 True 1
Fn
System Get Time type = Ticks, time = 111993 True 2
Fn
System Get Time type = Ticks, time = 112273 True 1
Fn
System Get Time type = Ticks, time = 112632 True 1
Fn
System Get Time type = Ticks, time = 112882 True 1
Fn
System Get Time type = Ticks, time = 113225 True 2
Fn
System Get Time type = Ticks, time = 113490 True 1
Fn
System Get Time type = Ticks, time = 113599 True 1
Fn
System Get Time type = Ticks, time = 113709 True 1
Fn
System Get Time type = Ticks, time = 113943 True 1
Fn
System Get Time type = Ticks, time = 114442 True 2
Fn
System Get Time type = Ticks, time = 114629 True 1
Fn
System Get Time type = Ticks, time = 115003 True 1
Fn
System Get Time type = Ticks, time = 115440 True 1
Fn
System Get Time type = Ticks, time = 115674 True 2
Fn
System Get Time type = Ticks, time = 116017 True 1
Fn
System Get Time type = Ticks, time = 116376 True 1
Fn
System Get Time type = Ticks, time = 116813 True 2
Fn
System Get Time type = Ticks, time = 117156 True 1
Fn
System Get Time type = Ticks, time = 117718 True 1
Fn
System Get Time type = Ticks, time = 117952 True 2
Fn
System Get Time type = Ticks, time = 118123 True 1
Fn
System Get Time type = Ticks, time = 118264 True 1
Fn
System Get Time type = Ticks, time = 118857 True 1
Fn
System Get Time type = Ticks, time = 119137 True 2
Fn
System Get Time type = Ticks, time = 119574 True 1
Fn
System Get Time type = Ticks, time = 119855 True 1
Fn
System Get Time type = Ticks, time = 120042 True 1
Fn
System Get Time type = Ticks, time = 120261 True 2
Fn
System Get Time type = Ticks, time = 120604 True 1
Fn
System Get Time type = Ticks, time = 120978 True 1
Fn
System Get Time type = Ticks, time = 121836 True 2
Fn
System Get Time type = Ticks, time = 122133 True 1
Fn
System Get Time type = Ticks, time = 122507 True 1
Fn
System Get Time type = Ticks, time = 122835 True 1
Fn
System Get Time type = Ticks, time = 123037 True 2
Fn
System Get Time type = Ticks, time = 123178 True 1
Fn
System Get Time type = Ticks, time = 123287 True 1
Fn
System Get Time type = Ticks, time = 123412 True 1
Fn
System Get Time type = Ticks, time = 123521 True 1
Fn
System Get Time type = Ticks, time = 123786 True 1
Fn
System Get Time type = Ticks, time = 123911 True 1
Fn
System Get Time type = Ticks, time = 124036 True 1
Fn
System Get Time type = Ticks, time = 124145 True 2
Fn
System Get Time type = Ticks, time = 124254 True 1
Fn
System Get Time type = Ticks, time = 124363 True 1
Fn
System Get Time type = Ticks, time = 124473 True 1
Fn
System Get Time type = Ticks, time = 124613 True 1
Fn
System Get Time type = Ticks, time = 124722 True 1
Fn
System Get Time type = Ticks, time = 124832 True 1
Fn
System Get Time type = Ticks, time = 124941 True 1
Fn
System Get Time type = Ticks, time = 125081 True 1
Fn
System Get Time type = Ticks, time = 125190 True 2
Fn
System Get Time type = Ticks, time = 125300 True 1
Fn
System Get Time type = Ticks, time = 125409 True 1
Fn
System Get Time type = Ticks, time = 125518 True 1
Fn
System Get Time type = Ticks, time = 125627 True 1
Fn
System Get Time type = Ticks, time = 125736 True 1
Fn
System Get Time type = Ticks, time = 125861 True 1
Fn
System Get Time type = Ticks, time = 125970 True 1
Fn
System Get Time type = Ticks, time = 126080 True 1
Fn
System Get Time type = Ticks, time = 126204 True 2
Fn
System Get Time type = Ticks, time = 126314 True 1
Fn
System Get Time type = Ticks, time = 126423 True 1
Fn
System Get Time type = Ticks, time = 126532 True 1
Fn
System Get Time type = Ticks, time = 126641 True 1
Fn
System Get Time type = Ticks, time = 126875 True 1
Fn
System Get Time type = Ticks, time = 126984 True 1
Fn
System Get Time type = Ticks, time = 127109 True 1
Fn
System Get Time type = Ticks, time = 127218 True 2
Fn
System Get Time type = Ticks, time = 127328 True 1
Fn
System Get Time type = Ticks, time = 127468 True 1
Fn
System Get Time type = Ticks, time = 127811 True 1
Fn
System Get Time type = Ticks, time = 128186 True 1
Fn
System Get Time type = Ticks, time = 128342 True 2
Fn
Thread 0x180
108 0
»
Category Operation Information Success Count Logfile
System Get Time type = Ticks, time = 107297 True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x773b0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x773dd650 True 1
Fn
System Get Time type = Ticks, time = 107500 True 1
Fn
System Get Time type = Ticks, time = 107640 True 1
Fn
System Get Time type = Ticks, time = 107765 True 1
Fn
System Get Time type = Ticks, time = 108124 True 1
Fn
System Get Time type = Ticks, time = 108607 True 2
Fn
System Get Time type = Ticks, time = 108732 True 1
Fn
System Get Time type = Ticks, time = 109029 True 1
Fn
System Get Time type = Ticks, time = 109637 True 2
Fn
System Get Time type = Ticks, time = 110183 True 1
Fn
System Get Time type = Ticks, time = 110542 True 1
Fn
System Get Time type = Ticks, time = 110854 True 2
Fn
System Get Time type = Ticks, time = 111088 True 1
Fn
System Get Time type = Ticks, time = 111618 True 1
Fn
System Get Time type = Ticks, time = 111993 True 2
Fn
System Get Time type = Ticks, time = 112273 True 1
Fn
System Get Time type = Ticks, time = 112632 True 1
Fn
System Get Time type = Ticks, time = 112882 True 1
Fn
System Get Time type = Ticks, time = 113225 True 2
Fn
System Get Time type = Ticks, time = 113490 True 1
Fn
System Get Time type = Ticks, time = 113599 True 1
Fn
System Get Time type = Ticks, time = 113709 True 1
Fn
System Get Time type = Ticks, time = 113943 True 1
Fn
System Get Time type = Ticks, time = 114442 True 2
Fn
System Get Time type = Ticks, time = 114629 True 1
Fn
System Get Time type = Ticks, time = 115003 True 1
Fn
System Get Time type = Ticks, time = 115440 True 1
Fn
System Get Time type = Ticks, time = 115674 True 2
Fn
System Get Time type = Ticks, time = 116017 True 1
Fn
System Get Time type = Ticks, time = 116376 True 1
Fn
System Get Time type = Ticks, time = 116813 True 2
Fn
System Get Time type = Ticks, time = 117156 True 1
Fn
System Get Time type = Ticks, time = 117718 True 1
Fn
System Get Time type = Ticks, time = 117952 True 2
Fn
System Get Time type = Ticks, time = 118123 True 1
Fn
System Get Time type = Ticks, time = 118264 True 1
Fn
System Get Time type = Ticks, time = 118857 True 1
Fn
System Get Time type = Ticks, time = 119137 True 2
Fn
System Get Time type = Ticks, time = 119574 True 1
Fn
System Get Time type = Ticks, time = 119855 True 1
Fn
System Get Time type = Ticks, time = 120042 True 1
Fn
System Get Time type = Ticks, time = 120261 True 2
Fn
System Get Time type = Ticks, time = 120604 True 1
Fn
System Get Time type = Ticks, time = 120978 True 1
Fn
System Get Time type = Ticks, time = 121836 True 2
Fn
System Get Time type = Ticks, time = 122133 True 1
Fn
System Get Time type = Ticks, time = 122507 True 1
Fn
System Get Time type = Ticks, time = 122835 True 1
Fn
System Get Time type = Ticks, time = 123037 True 2
Fn
System Get Time type = Ticks, time = 123178 True 1
Fn
System Get Time type = Ticks, time = 123287 True 1
Fn
System Get Time type = Ticks, time = 123412 True 1
Fn
System Get Time type = Ticks, time = 123521 True 1
Fn
System Get Time type = Ticks, time = 123786 True 1
Fn
System Get Time type = Ticks, time = 123911 True 1
Fn
System Get Time type = Ticks, time = 124036 True 1
Fn
System Get Time type = Ticks, time = 124145 True 2
Fn
System Get Time type = Ticks, time = 124254 True 1
Fn
System Get Time type = Ticks, time = 124363 True 1
Fn
System Get Time type = Ticks, time = 124473 True 1
Fn
System Get Time type = Ticks, time = 124613 True 1
Fn
System Get Time type = Ticks, time = 124722 True 1
Fn
System Get Time type = Ticks, time = 124832 True 1
Fn
System Get Time type = Ticks, time = 124941 True 1
Fn
System Get Time type = Ticks, time = 125081 True 1
Fn
System Get Time type = Ticks, time = 125190 True 2
Fn
System Get Time type = Ticks, time = 125300 True 1
Fn
System Get Time type = Ticks, time = 125409 True 1
Fn
System Get Time type = Ticks, time = 125518 True 1
Fn
System Get Time type = Ticks, time = 125627 True 1
Fn
System Get Time type = Ticks, time = 125736 True 1
Fn
System Get Time type = Ticks, time = 125861 True 1
Fn
System Get Time type = Ticks, time = 125970 True 1
Fn
System Get Time type = Ticks, time = 126080 True 1
Fn
System Get Time type = Ticks, time = 126204 True 2
Fn
System Get Time type = Ticks, time = 126314 True 1
Fn
System Get Time type = Ticks, time = 126423 True 1
Fn
System Get Time type = Ticks, time = 126532 True 1
Fn
System Get Time type = Ticks, time = 126641 True 1
Fn
System Get Time type = Ticks, time = 126875 True 1
Fn
System Get Time type = Ticks, time = 126984 True 1
Fn
System Get Time type = Ticks, time = 127109 True 1
Fn
System Get Time type = Ticks, time = 127218 True 2
Fn
System Get Time type = Ticks, time = 127328 True 1
Fn
System Get Time type = Ticks, time = 127468 True 1
Fn
System Get Time type = Ticks, time = 127811 True 1
Fn
System Get Time type = Ticks, time = 128186 True 1
Fn
System Get Time type = Ticks, time = 128342 True 2
Fn
Thread 0x70c
559 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x773b0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x773dd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 1
Fn
File Create filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, type = size, size_out = 129 True 1
Fn
File Get Info filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, type = file_attributes True 1
Fn
File Get Info filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, size = 1048560, size_out = 129 True 1
Fn
Data
File Write filename = C:\Boot\BOOTSTAT.DAT, size = 144 True 1
Fn
Data
File Read filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Boot\BOOTSTAT.DAT, size = 234 True 1
Fn
Data
File Delete filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 1
Fn
File Create filename = C:\BOOTSECT.BAK, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\BOOTSECT.BAK, type = size, size_out = 8192 True 1
Fn
File Get Info filename = C:\BOOTSECT.BAK, type = file_attributes True 1
Fn
File Get Info filename = C:\BOOTSECT.BAK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\BOOTSECT.BAK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\BOOTSECT.BAK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\BOOTSECT.BAK, size = 1048560, size_out = 8192 True 1
Fn
Data
File Write filename = C:\BOOTSECT.BAK.id-9C354B42.[bestdecoding@cock.li].best, size = 8208 True 1
Fn
Data
File Read filename = C:\BOOTSECT.BAK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\BOOTSECT.BAK.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\BOOTSECT.BAK True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml, type = size, size_out = 3186 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml, size = 1048560, size_out = 3186 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 3200 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 2424 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 2424 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 2432 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml, type = size, size_out = 1347 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml, size = 1048560, size_out = 1347 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 1360 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml, type = size, size_out = 1458 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml, size = 1048560, size_out = 1458 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 1472 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml, type = size, size_out = 9503 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml, size = 1048560, size_out = 9503 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 9504 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml, type = size, size_out = 1606 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml, size = 1048560, size_out = 1606 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 1616 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 1872 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 1872 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 1888 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml, type = size, size_out = 596341 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml, size = 1048560, size_out = 596341 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 596352 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml, type = size, size_out = 4274 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml, size = 1048560, size_out = 4274 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 4288 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS, type = size, size_out = 15067 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS, size = 1048560, size_out = 15067 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id-9C354B42.[bestdecoding@cock.li].best, size = 15072 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, type = size, size_out = 791686 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 1600388 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, type = size, size_out = 1434 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml, type = size, size_out = 212 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml, type = size, size_out = 384 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml, type = size, size_out = 1118 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML, type = size, size_out = 3166 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML, type = size, size_out = 1565 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML, size = 1048560, size_out = 1565 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 1568 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML, type = size, size_out = 2296 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML, size = 1048560, size_out = 2296 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 2304 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML, type = size, size_out = 1852 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML, size = 1048560, size_out = 1852 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 1856 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM, type = size, size_out = 71236 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM, size = 1048560, size_out = 71236 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 71248 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 226 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, type = size, size_out = 37689 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, size = 1048560, size_out = 37689 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab, size = 37696 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, type = size, size_out = 67190 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, size = 1048560, size_out = 67190 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 67200 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML, type = size, size_out = 4274 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML, size = 1048560, size_out = 4274 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, size = 4288 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML, type = size, size_out = 3186 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML, size = 1048560, size_out = 3186 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 3200 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML, type = size, size_out = 6421 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML, size = 1048560, size_out = 6421 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 6432 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML, type = size, size_out = 1872 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML, size = 1048560, size_out = 1872 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 1888 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, type = size, size_out = 811 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, size = 1048560, size_out = 811 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 816 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML, type = size, size_out = 1450 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML, size = 1048560, size_out = 1450 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 1456 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML, type = size, size_out = 1608 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML, size = 1048560, size_out = 1608 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 1616 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML, type = size, size_out = 9503 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML, size = 1048560, size_out = 9503 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 9504 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML, type = size, size_out = 8723 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML, size = 1048560, size_out = 8723 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 8736 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML, type = size, size_out = 8564 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML, size = 1048560, size_out = 8564 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 8576 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 228 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, type = size, size_out = 1183416 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, size = 1048560, size_out = 1048560 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf, size = 1048560 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi, size = 1048560, size_out = 134856 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf, size = 134864 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm, type = size, size_out = 237 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF, type = size, size_out = 2985 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF, size = 1048560, size_out = 2985 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[bestdecoding@cock.li].best, size = 2992 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG, type = size, size_out = 20371 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG, size = 1048560, size_out = 20371 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 20384 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF, type = size, size_out = 1293 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF, size = 1048560, size_out = 1293 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1296 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, type = size, size_out = 20575 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, size = 1048560, size_out = 20575 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 20576 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG, type = size, size_out = 33277 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG, size = 1048560, size_out = 33277 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 33280 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF, type = size, size_out = 1453 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF, size = 1048560, size_out = 1453 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1456 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF, type = size, size_out = 1354 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF, size = 1048560, size_out = 1354 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, size = 1360 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF, type = size, size_out = 2552 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF, size = 1048560, size_out = 2552 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 2560 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, type = size, size_out = 33559 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, size = 1048560, size_out = 33559 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 33568 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF, type = size, size_out = 1659 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF, size = 1048560, size_out = 1659 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1664 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF, type = size, size_out = 1364 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF, size = 1048560, size_out = 1364 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1376 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF, type = size, size_out = 1593 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF, size = 1048560, size_out = 1593 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1600 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG, type = size, size_out = 21745 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG, size = 1048560, size_out = 21745 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 21760 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, type = size, size_out = 1666 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, size = 1048560 False 1
Fn
Thread 0x5ac
581 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x773b0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x773dd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 1
Fn
File Create filename = C:\Boot\BCD.LOG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\BOOTSTAT.DAT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\BOOTSTAT.DAT, type = size, size_out = 65536 True 1
Fn
File Get Info filename = C:\Boot\BOOTSTAT.DAT, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\BOOTSTAT.DAT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\BOOTSTAT.DAT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Boot\BOOTSTAT.DAT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Boot\BOOTSTAT.DAT, size = 1048560, size_out = 65536 True 1
Fn
Data
File Write filename = C:\Boot\BOOTSTAT.DAT.id-9C354B42.[bestdecoding@cock.li].best, size = 65552 True 1
Fn
Data
File Read filename = C:\Boot\BOOTSTAT.DAT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Boot\BOOTSTAT.DAT.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Boot\BOOTSTAT.DAT True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 3
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml, type = size, size_out = 1450 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml, size = 1048560, size_out = 1450 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 1456 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 4207 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 4207 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 4208 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml, type = size, size_out = 1800 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml, size = 1048560, size_out = 1800 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 1808 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml, type = size, size_out = 1457 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml, size = 1048560, size_out = 1457 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 1472 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, type = size, size_out = 811 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, size = 1048560, size_out = 811 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 816 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 5884 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 5884 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 5888 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 1988 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 1988 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 2000 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 1452 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 1452 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 1456 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm, type = size, size_out = 27195 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm, size = 1048560, size_out = 27195 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id-9C354B42.[bestdecoding@cock.li].best, size = 27200 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 9352 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 9352 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 9360 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml, type = size, size_out = 4274 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml, size = 1048560, size_out = 4274 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 4288 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml, type = size, size_out = 8723 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml, size = 1048560, size_out = 8723 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 8736 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG, type = size, size_out = 1682 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG, size = 1048560, size_out = 1682 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 1696 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, type = size, size_out = 27045 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml, type = size, size_out = 194048 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml, type = size, size_out = 392 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml, type = size, size_out = 3150 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml, type = size, size_out = 247 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml, type = size, size_out = 3161 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML, type = size, size_out = 1349 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML, size = 1048560, size_out = 1349 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 1360 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML, type = size, size_out = 2624 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML, size = 1048560, size_out = 2624 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 2640 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML, type = size, size_out = 913 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML, size = 1048560, size_out = 913 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, size = 928 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML, type = size, size_out = 1606 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML, size = 1048560, size_out = 1606 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 1616 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, type = size, size_out = 16683 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, size = 1048560, size_out = 16683 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 16688 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML, type = size, size_out = 1457 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML, size = 1048560, size_out = 1457 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 1472 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML, type = size, size_out = 5884 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML, size = 1048560, size_out = 5884 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 5888 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML, type = size, size_out = 6241 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML, size = 1048560, size_out = 6241 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 6256 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, type = size, size_out = 20577 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, size = 1048560, size_out = 20577 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 20592 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini, type = size, size_out = 645 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini, size = 1048560, size_out = 645 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.id-9C354B42.[bestdecoding@cock.li].best, size = 656 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf, type = size, size_out = 3792 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm, type = size, size_out = 231 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg, type = size, size_out = 23871 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll, type = size, size_out = 5524 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Small_News.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Small_News.jpg, type = size, size_out = 1990 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Small_News.jpg, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Small_News.jpg.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Small_News.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Soft Blue.htm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Soft Blue.htm, type = size, size_out = 232 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Soft Blue.htm, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Soft Blue.htm.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Soft Blue.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\SoftBlue.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\SoftBlue.jpg, type = size, size_out = 10569 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\SoftBlue.jpg, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\SoftBlue.jpg.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\SoftBlue.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm, type = size, size_out = 230 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.jpg, type = size, size_out = 7505 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.jpg, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.jpg.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif, type = size, size_out = 1864 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif, size = 1048560, size_out = 1569 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1584 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, type = size, size_out = 25234 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, size = 1048560, size_out = 25234 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 25248 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 34916 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG, size = 1048560, size_out = 34916 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 34928 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG, type = size, size_out = 20627 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG, size = 1048560, size_out = 20627 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 20640 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG, type = size, size_out = 33009 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG, size = 1048560, size_out = 33009 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 33024 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG, type = size, size_out = 31837 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG, size = 1048560, size_out = 31837 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 31840 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, type = size, size_out = 29925 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, size = 1048560, size_out = 29925 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 29936 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF, type = size, size_out = 1363 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF, size = 1048560, size_out = 1363 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1376 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF, type = size, size_out = 3957 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF, size = 1048560, size_out = 3957 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 3968 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG, type = size, size_out = 25106 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG, size = 1048560, size_out = 25106 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 25120 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF, type = size, size_out = 1347 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF, size = 1048560, size_out = 1347 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1360 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG, type = size, size_out = 26402 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG, size = 1048560, size_out = 26402 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, size = 26416 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF, type = size, size_out = 5120 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF, size = 1048560, size_out = 5120 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, size = 5136 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF, type = size, size_out = 2476 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF, size = 1048560, size_out = 2476 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, size = 2480 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 44850 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG, size = 1048560, size_out = 44850 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 44864 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG, type = size, size_out = 11573 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG, size = 1048560, size_out = 11573 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG, size = 11584 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF, type = size, size_out = 1339 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF, size = 1048560, size_out = 1339 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, size = 1344 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG, type = size, size_out = 19563 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG, size = 1048560 False 1
Fn
Thread 0xb0
543 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x773b0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x773dd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 4
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, type = size, size_out = 1565 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, size = 1048560, size_out = 1565 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 1568 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml, type = size, size_out = 1450 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml, size = 1048560, size_out = 1450 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 1456 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 1608 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 1608 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 1616 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 1852 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 1852 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 1856 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 6241 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 6241 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 6256 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml, type = size, size_out = 1452 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml, size = 1048560, size_out = 1452 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 1456 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml, type = size, size_out = 819 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml, size = 1048560, size_out = 819 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 832 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml, type = size, size_out = 1349 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml, size = 1048560, size_out = 1349 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 1360 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml, type = size, size_out = 819 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml, size = 1048560, size_out = 819 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 832 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 2624 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 2624 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 2640 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 31094 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 31094 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 31104 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 16683 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 16683 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 16688 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 20577 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 20577 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 20592 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, type = size, size_out = 1061 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, size = 1048560, size_out = 1061 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[bestdecoding@cock.li].best, size = 1072 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, type = size, size_out = 89600 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, type = size, size_out = 31744 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, type = size, size_out = 33280 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, type = size, size_out = 62976 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, type = size, size_out = 197120 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml, type = size, size_out = 224256 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 786688 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML, type = size, size_out = 1452 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML, size = 1048560, size_out = 1452 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 1456 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, type = size, size_out = 1383 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, size = 1048560, size_out = 1383 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 1392 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, type = size, size_out = 1988 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, size = 1048560, size_out = 1988 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 2000 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 1886 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML, size = 1048560, size_out = 1886 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 1888 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML, type = size, size_out = 1347 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML, size = 1048560, size_out = 1347 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 1360 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML, type = size, size_out = 1458 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML, size = 1048560, size_out = 1458 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, size = 1472 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML, type = size, size_out = 31094 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML, size = 1048560, size_out = 31094 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 31104 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML, type = size, size_out = 1800 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML, size = 1048560, size_out = 1800 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 1808 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM, type = size, size_out = 11463 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM, size = 1048560, size_out = 11463 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM.id-9C354B42.[bestdecoding@cock.li].best, size = 11472 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML, type = size, size_out = 8918 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML, size = 1048560, size_out = 8918 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 8928 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML, type = size, size_out = 1844 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML, size = 1048560, size_out = 1844 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 1856 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT, type = size, size_out = 39017 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT, size = 1048560, size_out = 39017 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT.id-9C354B42.[bestdecoding@cock.li].best, size = 39024 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf, type = size, size_out = 10340 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg, type = size, size_out = 6406 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf, type = size, size_out = 2920 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf, type = size, size_out = 7498 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm, type = size, size_out = 235 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg, type = size, size_out = 4222 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 152300 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 19780 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 19792 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF, type = size, size_out = 2722 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF, size = 1048560, size_out = 2722 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 2736 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG, type = size, size_out = 43276 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG, size = 1048560, size_out = 43276 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 43280 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF, type = size, size_out = 945 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF, size = 1048560, size_out = 945 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF, size = 960 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF, type = size, size_out = 1287 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF, size = 1048560, size_out = 1287 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1296 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF, type = size, size_out = 1347 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF, size = 1048560, size_out = 1347 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, size = 1360 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 19485 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG, size = 1048560, size_out = 19485 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 19488 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, type = size, size_out = 18413 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, size = 1048560, size_out = 18413 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 18416 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF, type = size, size_out = 1379 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF, size = 1048560, size_out = 1379 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG, size = 1392 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG, type = size, size_out = 37440 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG, size = 1048560, size_out = 37440 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 37456 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG, type = size, size_out = 16738 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG, size = 1048560, size_out = 16738 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 16752 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF, type = size, size_out = 1439 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF, size = 1048560, size_out = 1439 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1440 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG, type = size, size_out = 15737 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG, size = 1048560 False 1
Fn
Thread 0x588
630 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x773b0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x773dd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 4
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 2296 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 2296 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 2304 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 1886 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 1886 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 1888 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml, type = size, size_out = 1383 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml, size = 1048560, size_out = 1383 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 1392 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 2362 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 2362 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 2368 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml, type = size, size_out = 1231 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml, size = 1048560, size_out = 1231 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1232 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, size = 242 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml, type = size, size_out = 913 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml, size = 1048560, size_out = 913 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 928 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml, type = size, size_out = 5557 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml, size = 1048560, size_out = 5557 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 5568 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm, type = size, size_out = 67190 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm, size = 1048560, size_out = 67190 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id-9C354B42.[bestdecoding@cock.li].best, size = 67200 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml, type = size, size_out = 596341 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml, size = 1048560, size_out = 596341 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 596352 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml, type = size, size_out = 16852 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml, size = 1048560, size_out = 16852 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 16864 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml, type = size, size_out = 6421 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml, size = 1048560, size_out = 6421 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 6432 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml, type = size, size_out = 4274 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml, size = 1048560, size_out = 4274 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 4288 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF, type = size, size_out = 1069 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, size = 1048560, size_out = 1069 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, size = 1072 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, size = 224 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, type = size, size_out = 222208 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml, type = size, size_out = 738 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM, type = size, size_out = 1941 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM, size = 1048560, size_out = 1941 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id-9C354B42.[bestdecoding@cock.li].best, size = 1952 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML, type = size, size_out = 819 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML, size = 1048560, size_out = 819 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 832 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML, type = size, size_out = 1231 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML, size = 1048560, size_out = 1231 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 1232 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML, type = size, size_out = 596341 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML, size = 1048560, size_out = 596341 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 596352 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML, type = size, size_out = 5557 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML, size = 1048560, size_out = 5557 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 5568 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML, type = size, size_out = 819 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML, size = 1048560, size_out = 819 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 832 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM, type = size, size_out = 26929 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM, size = 1048560, size_out = 26929 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 26944 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, type = size, size_out = 27195 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, size = 1048560, size_out = 27195 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 27200 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML, type = size, size_out = 9352 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML, size = 1048560, size_out = 9352 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 9360 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML, type = size, size_out = 2362 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML, size = 1048560, size_out = 2362 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 2368 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML, type = size, size_out = 4207 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML, size = 1048560, size_out = 4207 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 4208 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML, type = size, size_out = 1450 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 1450 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, size = 1456 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML, type = size, size_out = 1452 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML, size = 1048560, size_out = 1452 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 1456 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML, type = size, size_out = 16852 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML, size = 1048560, size_out = 16852 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 16864 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML, type = size, size_out = 2424 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML, size = 1048560, size_out = 2424 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 2432 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML, type = size, size_out = 2687 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML, size = 1048560, size_out = 2687 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 2688 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, type = size, size_out = 227311 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, size = 1048560, size_out = 227311 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.id-9C354B42.[bestdecoding@cock.li].best, size = 227312 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm, type = size, size_out = 255 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg, type = size, size_out = 1074 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg, type = size, size_out = 2575 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif, type = size, size_out = 4587 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif, type = size, size_out = 2319 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, type = size, size_out = 116724 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF, type = size, size_out = 2848 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF, size = 1048560, size_out = 2848 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 2864 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF, type = size, size_out = 2181 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF, size = 1048560, size_out = 2181 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 2192 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF, type = size, size_out = 1560 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF, size = 1048560, size_out = 1560 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab, size = 1568 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF, type = size, size_out = 1925 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF, size = 1048560, size_out = 1925 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1936 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, type = size, size_out = 27407 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, size = 1048560, size_out = 27407 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 27408 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF, type = size, size_out = 3479 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF, size = 1048560, size_out = 3479 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 3488 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG, type = size, size_out = 32607 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG, size = 1048560, size_out = 32607 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 32608 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF, type = size, size_out = 2044 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF, size = 1048560, size_out = 2044 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 2048 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG, type = size, size_out = 28595 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG, size = 1048560, size_out = 28595 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 28608 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 32403 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, size = 1048560, size_out = 32403 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 32416 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, type = size, size_out = 32433 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, size = 1048560, size_out = 32433 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 32448 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG, type = size, size_out = 60724 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG, size = 1048560, size_out = 60724 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 60736 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG, type = size, size_out = 18817 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG, size = 1048560, size_out = 18817 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 18832 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, type = size, size_out = 5179 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, size = 1048560, size_out = 5179 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, size = 5184 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF, type = size, size_out = 1232 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF, size = 1048560, size_out = 1232 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG, size = 1248 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG, type = size, size_out = 48115 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG, size = 1048560, size_out = 48115 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 48128 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF, type = size, size_out = 2574 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF, size = 1048560, size_out = 2574 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 2576 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG, type = size, size_out = 37112 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG, size = 1048560, size_out = 37112 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 37120 True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF, type = size, size_out = 1423 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF, size = 1048560, size_out = 1423 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1424 False 1
Fn
Thread 0x480
207 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x773b0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x773dd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 1
Fn
File Create filename = C:\Boot\BCD, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\BCD.LOG1, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\BCD.LOG1, type = size, size_out = 0 True 1
Fn
File Create filename = C:\Boot\BCD.LOG2, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\BCD.LOG2, type = size, size_out = 0 True 1
Fn
File Create filename = C:\Boot\cs-CZ\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\cs-CZ\bootmgr.exe.mui, type = size, size_out = 89168 True 1
Fn
File Get Info filename = C:\Boot\cs-CZ\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\cs-CZ\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\cs-CZ\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\da-DK\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\da-DK\bootmgr.exe.mui, type = size, size_out = 87616 True 1
Fn
File Get Info filename = C:\Boot\da-DK\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\da-DK\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\da-DK\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\de-DE\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\de-DE\bootmgr.exe.mui, type = size, size_out = 91712 True 1
Fn
File Get Info filename = C:\Boot\de-DE\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\de-DE\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\de-DE\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\el-GR\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\el-GR\bootmgr.exe.mui, type = size, size_out = 94800 True 1
Fn
File Get Info filename = C:\Boot\el-GR\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\el-GR\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\el-GR\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Move source_filename = C:\Boot\Fonts\chs_boot.ttf, destination_filename = C:\Boot\Fonts\chs_boot.ttf.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Boot\Fonts\cht_boot.ttf, destination_filename = C:\Boot\Fonts\cht_boot.ttf.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786686 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi, type = size, size_out = 2522624 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 786690 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 13642474 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab, destination_filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786686 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab, type = size, size_out = 18874884 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786686 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab, type = size, size_out = 50823389 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786690 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi, type = size, size_out = 2511872 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 786696 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe, type = size, size_out = 519584 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe, size = 1048560, size_out = 519584 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe.id-9C354B42.[bestdecoding@cock.li].best, size = 519600 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi, type = size, size_out = 868864 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi, size = 1048560, size_out = 868864 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 868880 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST, type = size, size_out = 3584 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST, size = 1048560, size_out = 3584 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST.id-9C354B42.[bestdecoding@cock.li].best, size = 3600 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi, type = size, size_out = 868864 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi, size = 1048560, size_out = 868864 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 868880 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe, type = size, size_out = 174440 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe, size = 1048560, size_out = 174440 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[bestdecoding@cock.li].best, size = 174448 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[bestdecoding@cock.li].best, size = 226 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll, type = size, size_out = 7378792 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll, destination_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 786688 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab, type = size, size_out = 177720283 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab, destination_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786690 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll, type = size, size_out = 7378792 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll, destination_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 2
Fn
File Read filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 False 1
Fn
Thread 0x724
217 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x773b0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x773dd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 1
Fn
File Create filename = C:\Boot\Fonts\jpn_boot.ttf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\Fonts\jpn_boot.ttf, type = size, size_out = 1984228 True 1
Fn
File Get Info filename = C:\Boot\Fonts\jpn_boot.ttf, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\Fonts\jpn_boot.ttf.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Boot\Fonts\jpn_boot.ttf, destination_filename = C:\Boot\Fonts\jpn_boot.ttf.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi, type = size, size_out = 2503680 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 786702 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi, type = size, size_out = 2513920 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 786700 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi, type = size, size_out = 2865664 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 786696 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab, type = size, size_out = 43806141 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786688 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab, type = size, size_out = 21064532 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab, destination_filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786686 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi, type = size, size_out = 2797568 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 786692 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf, type = size, size_out = 8265165 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786688 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll, type = size, size_out = 107912 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll, size = 1048560, size_out = 107912 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 107920 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif, type = size, size_out = 526176 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll, size = 1048560, size_out = 526176 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 526192 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab, type = size, size_out = 14127746 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786692 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 28016276 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786686 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, type = size, size_out = 715834 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 1048560, size_out = 715834 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[bestdecoding@cock.li].best, size = 715840 True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[bestdecoding@cock.li].best, size = 260 True 1
Fn
File Delete filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 1377656 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 1048560 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560 True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 329096 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 329104 True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
File Delete filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe, type = size, size_out = 174440 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe, size = 1048560, size_out = 174440 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[bestdecoding@cock.li].best, size = 174448 True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[bestdecoding@cock.li].best, size = 226 True 1
Fn
File Delete filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, type = size, size_out = 36233052 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, destination_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 2
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG, size = 262144, size_out = 262144 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG, size = 786692 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG, size = 262144 True 3
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, type = size, size_out = 715834 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 1048560 False 1
Fn
Thread 0x730
252 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x773b0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x773dd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 1
Fn
File Create filename = C:\Boot\Fonts\kor_boot.ttf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\Fonts\kor_boot.ttf, type = size, size_out = 2371360 True 1
Fn
File Get Info filename = C:\Boot\Fonts\kor_boot.ttf, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\Fonts\kor_boot.ttf.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Boot\Fonts\kor_boot.ttf, destination_filename = C:\Boot\Fonts\kor_boot.ttf.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi, type = size, size_out = 2506240 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 786692 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab, type = size, size_out = 9958388 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786686 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi, type = size, size_out = 875520 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi, size = 1048560, size_out = 875520 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 875536 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi, type = size, size_out = 881152 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi, size = 1048560, size_out = 881152 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 881168 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi, type = size, size_out = 885760 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi, size = 1048560, size_out = 885760 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 885776 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi, type = size, size_out = 868864 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi, size = 1048560, size_out = 868864 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 868880 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi, type = size, size_out = 873984 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi, size = 1048560, size_out = 873984 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 874000 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi, type = size, size_out = 3124224 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 786698 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi, type = size, size_out = 2503680 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 786696 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi, type = size, size_out = 2507776 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 786694 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest, type = size, size_out = 1857 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest, size = 1048560, size_out = 1857 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest.id-9C354B42.[bestdecoding@cock.li].best, size = 1872 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest.id-9C354B42.[bestdecoding@cock.li].best, size = 266 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll, type = size, size_out = 655872 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll, size = 1048560, size_out = 655872 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 655888 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi, type = size, size_out = 3702272 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 786694 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll, type = size, size_out = 191872 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll, size = 1048560, size_out = 191872 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 191888 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi, type = size, size_out = 1992192 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi, destination_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 786696 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 2
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 1
Fn
Data
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, type = size, size_out = 36233052 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, destination_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786692 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi, type = size, size_out = 27532288 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi, destination_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 786696 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi, type = size, size_out = 1992192 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi, destination_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
File Write filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 786696 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF, size = 262144 True 3
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi, type = size, size_out = 10798080 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi, destination_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 False 1
Fn
Thread 0x538
181 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x773b0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x773dd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 1
Fn
File Create filename = C:\Boot\Fonts\wgl4_boot.ttf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\Fonts\wgl4_boot.ttf, type = size, size_out = 47452 True 1
Fn
File Get Info filename = C:\Boot\Fonts\wgl4_boot.ttf, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\Fonts\wgl4_boot.ttf.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\Fonts\wgl4_boot.ttf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\fr-FR\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\fr-FR\bootmgr.exe.mui, type = size, size_out = 93248 True 1
Fn
File Get Info filename = C:\Boot\fr-FR\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\fr-FR\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\fr-FR\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\hu-HU\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\hu-HU\bootmgr.exe.mui, type = size, size_out = 90688 True 1
Fn
File Get Info filename = C:\Boot\hu-HU\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\hu-HU\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\hu-HU\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\it-IT\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\it-IT\bootmgr.exe.mui, type = size, size_out = 90704 True 1
Fn
File Get Info filename = C:\Boot\it-IT\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\it-IT\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\it-IT\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\ja-JP\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\ja-JP\bootmgr.exe.mui, type = size, size_out = 76352 True 1
Fn
File Get Info filename = C:\Boot\ja-JP\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\ja-JP\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\ja-JP\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\ko-KR\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\ko-KR\bootmgr.exe.mui, type = size, size_out = 75344 True 1
Fn
File Get Info filename = C:\Boot\ko-KR\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\ko-KR\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\ko-KR\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\memtest.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\memtest.exe, type = size, size_out = 485760 True 1
Fn
File Get Info filename = C:\Boot\memtest.exe, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\memtest.exe.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\memtest.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786690 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab, type = size, size_out = 14819276 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786690 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab, type = size, size_out = 11482605 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab, destination_filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786686 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab, type = size, size_out = 2928955 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786692 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab, type = size, size_out = 17456632 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786690 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab, type = size, size_out = 4095519 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786692 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE, type = size, size_out = 838536 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE, size = 1048560, size_out = 838536 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF, size = 838544 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF, size = 228 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi, type = size, size_out = 2517504 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 786694 True 1
Fn
File Write filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll, type = size, size_out = 1463568 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 1048560 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560 True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 415008 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 415024 True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
File Delete filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab, type = size, size_out = 222948913 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab, destination_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786692 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, type = size, size_out = 1463568 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 1048560 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560 True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560 False 1
Fn
Process #2: cmd.exe
245 0
»
Information Value
ID #2
File Name c:\windows\system32\cmd.exe
Command Line "C:\Windows\system32\cmd.exe"
Initial Working Directory C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
Monitor Start Time: 00:00:43, Reason: Child Process
Unmonitor End Time: 00:01:13, Reason: Self Terminated
Monitor Duration 00:00:30
OS Process Information
»
Information Value
PID 0x20c
Parent PID 0x7f8 (c:\users\5p5nrgjn0js halpmcxz\desktop\1.exe)
Is Created or Modified Executable False
Integrity Level High (Elevated)
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x 698
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory rw True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000020000 0x00020000 0x0002ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000030000 0x00030000 0x00033fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000040000 0x00040000 0x00040fff Pagefile Backed Memory r True False False -
locale.nls 0x00050000 0x000b6fff Memory Mapped File r False False False -
pagefile_0x00000000000c0000 0x000c0000 0x000c6fff Pagefile Backed Memory r True False False -
pagefile_0x00000000000d0000 0x000d0000 0x000d1fff Pagefile Backed Memory rw True False False -
private_0x00000000000e0000 0x000e0000 0x000e0fff Private Memory rw True False False -
private_0x00000000000f0000 0x000f0000 0x000f0fff Private Memory rw True False False -
c_1251.nls 0x00100000 0x00110fff Memory Mapped File r False False False -
private_0x0000000000190000 0x00190000 0x0028ffff Private Memory rw True False False -
private_0x0000000000290000 0x00290000 0x0038ffff Private Memory rw True False False -
private_0x0000000000390000 0x00390000 0x0048ffff Private Memory rw True False False -
basebrd.dll 0x00490000 0x00557fff Memory Mapped File r False False False -
private_0x00000000005e0000 0x005e0000 0x005effff Private Memory rw True False False -
pagefile_0x00000000005f0000 0x005f0000 0x00777fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000780000 0x00780000 0x00900fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000910000 0x00910000 0x01d0ffff Pagefile Backed Memory r True False False -
pagefile_0x0000000001d10000 0x01d10000 0x02052fff Pagefile Backed Memory r True False False -
pagefile_0x0000000002060000 0x02060000 0x02452fff Pagefile Backed Memory r True False False -
sortdefault.nls 0x02460000 0x0272efff Memory Mapped File r False False False -
cmd.exe 0x4a250000 0x4a2a8fff Memory Mapped File rwx True False False -
user32.dll 0x77640000 0x77739fff Memory Mapped File rwx False False False -
kernel32.dll 0x77740000 0x7785efff Memory Mapped File rwx False False False -
ntdll.dll 0x77860000 0x77a08fff Memory Mapped File rwx False False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory r True False False -
pagefile_0x000000007efe0000 0x7efe0000 0x7f0dffff Pagefile Backed Memory r True False False -
private_0x000000007f0e0000 0x7f0e0000 0x7ffdffff Private Memory r True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
private_0x000000007fff5000 0x7fff5000 0x7fff5fff Private Memory rw True False False -
winbrand.dll 0x7fef9060000 0x7fef9067fff Memory Mapped File rwx False False False -
kernelbase.dll 0x7fefd900000 0x7fefd96afff Memory Mapped File rwx False False False -
usp10.dll 0x7fefdb80000 0x7fefdc48fff Memory Mapped File rwx False False False -
lpk.dll 0x7fefdd30000 0x7fefdd3dfff Memory Mapped File rwx False False False -
imm32.dll 0x7fefdd40000 0x7fefdd6dfff Memory Mapped File rwx False False False -
gdi32.dll 0x7fefed10000 0x7fefed76fff Memory Mapped File rwx False False False -
msctf.dll 0x7fefed80000 0x7fefee88fff Memory Mapped File rwx False False False -
msvcrt.dll 0x7feffa80000 0x7feffb1efff Memory Mapped File rwx False False False -
apisetschema.dll 0x7feffb80000 0x7feffb80fff Memory Mapped File rwx False False False -
pagefile_0x000007fffffb0000 0x7fffffb0000 0x7fffffd2fff Pagefile Backed Memory r True False False -
private_0x000007fffffd9000 0x7fffffd9000 0x7fffffd9fff Private Memory rw True False False -
private_0x000007fffffde000 0x7fffffde000 0x7fffffdffff Private Memory rw True False False -
Threads
Thread 0x698
245 0
»
Category Operation Information Success Count Logfile
System Get Time type = System Time, time = 2019-01-23 10:44:09 (UTC) True 1
Fn
System Get Time type = Ticks, time = 107001 True 1
Fn
Module Get Handle module_name = c:\windows\system32\cmd.exe, base_address = 0x4a250000 True 1
Fn
Module Get Handle module_name = c:\windows\system32\kernel32.dll, base_address = 0x77740000 True 1
Fn
Module Get Address module_name = c:\windows\system32\kernel32.dll, function = SetThreadUILanguage, address_out = 0x77756d40 True 1
Fn
Registry Open Key reg_name = HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System False 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 2
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
Environment Get Environment String - True 2
Fn
Data
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DisableUNCCheck, data = 24, type = REG_NONE False 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DelayedExpansion, data = 1, type = REG_NONE False 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = CompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = PathCompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = AutoRun, data = 64, type = REG_NONE False 1
Fn
Registry Open Key reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DisableUNCCheck, data = 64, type = REG_NONE False 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DelayedExpansion, data = 1, type = REG_NONE False 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = CompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = PathCompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = AutoRun, data = 9, type = REG_NONE False 1
Fn
Module Get Filename process_name = c:\windows\system32\cmd.exe, file_name_orig = C:\Windows\system32\cmd.exe, size = 260 True 1
Fn
Environment Get Environment String name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ True 1
Fn
Environment Get Environment String name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC True 1
Fn
Environment Get Environment String name = PROMPT False 1
Fn
Environment Set Environment String name = PROMPT, value = $P$G True 1
Fn
Environment Get Environment String - True 1
Fn
Data
Environment Get Environment String name = COMSPEC, result_out = C:\Windows\system32\cmd.exe True 1
Fn
Environment Get Environment String name = KEYS False 1
Fn
File Get Info filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop, type = file_attributes True 2
Fn
Environment Set Environment String name = =C:, value = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop True 1
Fn
Environment Get Environment String - True 1
Fn
Data
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
System Get Info type = Operating System True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 36 True 1
Fn
Data
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 2 True 1
Fn
Data
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 63 True 1
Fn
Data
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 2 True 1
Fn
Data
Module Get Handle module_name = c:\windows\system32\kernel32.dll, base_address = 0x77740000 True 1
Fn
Module Get Address module_name = c:\windows\system32\kernel32.dll, function = CopyFileExW, address_out = 0x777523d0 True 1
Fn
Module Get Address module_name = c:\windows\system32\kernel32.dll, function = IsDebuggerPresent, address_out = 0x77748290 True 1
Fn
Module Get Address module_name = c:\windows\system32\kernel32.dll, function = SetConsoleInputExeNameW, address_out = 0x777517e0 True 1
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Get Info filename = STD_INPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 2 True 1
Fn
Data
Environment Get Environment String name = PROMPT, result_out = $P$G True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 38 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Get Info filename = STD_INPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Get Info filename = STD_INPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 24 True 1
Fn
Data
Environment Get Environment String name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ True 1
Fn
Environment Get Environment String name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC True 1
Fn
Process Create process_name = C:\Windows\system32\mode.com, os_pid = 0x244, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL True 1
Fn
Environment Set Environment String name = COPYCMD True 1
Fn
Environment Get Environment String - True 1
Fn
Data
Module Load module_name = NTDLL.DLL, base_address = 0x77860000 True 1
Fn
Module Get Address module_name = c:\windows\system32\ntdll.dll, function = NtQueryInformationProcess, address_out = 0x778b14a0 True 1
Fn
Process Get Info type = PROCESS_BASIC_INFORMATION True 1
Fn
Memory Read process_name = C:\Windows\system32\mode.com, address = 0x7fffffde000, size = 896 True 1
Fn
Data
Environment Set Environment String name = =ExitCode, value = 00000000 True 1
Fn
Environment Get Environment String - True 1
Fn
Data
Environment Set Environment String name = =ExitCodeAscii True 1
Fn
Environment Get Environment String - True 1
Fn
Data
File Open filename = STD_OUTPUT_HANDLE True 2
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 2 True 1
Fn
Data
Environment Get Environment String name = PROMPT, result_out = $P$G True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 38 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Get Info filename = STD_INPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Get Info filename = STD_INPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 36 True 1
Fn
Data
Environment Get Environment String name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ True 1
Fn
Environment Get Environment String name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC True 1
Fn
Process Create process_name = C:\Windows\system32\vssadmin.exe, os_pid = 0x6fc, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL True 1
Fn
Environment Set Environment String name = COPYCMD True 1
Fn
Environment Get Environment String - True 1
Fn
Data
Process Get Info type = PROCESS_BASIC_INFORMATION True 1
Fn
Memory Read process_name = C:\Windows\system32\vssadmin.exe, address = 0x7fffffdf000, size = 896 True 1
Fn
Data
Process #3: mode.com
0 0
»
Information Value
ID #3
File Name c:\windows\system32\mode.com
Command Line mode con cp select=1251
Initial Working Directory C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
Monitor Start Time: 00:00:45, Reason: Child Process
Unmonitor End Time: 00:00:47, Reason: Self Terminated
Monitor Duration 00:00:02
Remark No high level activity detected in monitored regions
OS Process Information
»
Information Value
PID 0x244
Parent PID 0x20c (c:\windows\system32\cmd.exe)
Is Created or Modified Executable False
Integrity Level High (Elevated)
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x 5B8
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory rw True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000020000 0x00020000 0x0002ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000030000 0x00030000 0x00033fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000040000 0x00040000 0x00040fff Pagefile Backed Memory r True False False -
private_0x0000000000050000 0x00050000 0x00050fff Private Memory rw True False False -
private_0x0000000000060000 0x00060000 0x00060fff Private Memory rw True False False -
private_0x0000000000070000 0x00070000 0x000effff Private Memory rw True False False -
locale.nls 0x000f0000 0x00156fff Memory Mapped File r False False False -
c_1251.nls 0x00160000 0x00170fff Memory Mapped File r False False False -
pagefile_0x0000000000180000 0x00180000 0x00186fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000190000 0x00190000 0x00191fff Pagefile Backed Memory rw True False False -
ulib.dll.mui 0x001a0000 0x001d7fff Memory Mapped File rw False False False -
private_0x0000000000200000 0x00200000 0x0020ffff Private Memory rw True False False -
private_0x00000000002d0000 0x002d0000 0x003cffff Private Memory rw True False False -
private_0x00000000003d0000 0x003d0000 0x004cffff Private Memory rw True False False -
pagefile_0x00000000004d0000 0x004d0000 0x00657fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000660000 0x00660000 0x007e0fff Pagefile Backed Memory r True False False -
pagefile_0x00000000007f0000 0x007f0000 0x01beffff Pagefile Backed Memory r True False False -
user32.dll 0x77640000 0x77739fff Memory Mapped File rwx False False False -
kernel32.dll 0x77740000 0x7785efff Memory Mapped File rwx False False False -
ntdll.dll 0x77860000 0x77a08fff Memory Mapped File rwx False False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory r True False False -
pagefile_0x000000007efe0000 0x7efe0000 0x7f0dffff Pagefile Backed Memory r True False False -
private_0x000000007f0e0000 0x7f0e0000 0x7ffdffff Private Memory r True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
mode.com 0xffe00000 0xffe0bfff Memory Mapped File rwx False False False -
ulib.dll 0x7fef9030000 0x7fef9057fff Memory Mapped File rwx False False False -
ureg.dll 0x7fef9070000 0x7fef907bfff Memory Mapped File rwx False False False -
uxtheme.dll 0x7fefbf90000 0x7fefbfe5fff Memory Mapped File rwx False False False -
kernelbase.dll 0x7fefd900000 0x7fefd96afff Memory Mapped File rwx False False False -
usp10.dll 0x7fefdb80000 0x7fefdc48fff Memory Mapped File rwx False False False -
lpk.dll 0x7fefdd30000 0x7fefdd3dfff Memory Mapped File rwx False False False -
imm32.dll 0x7fefdd40000 0x7fefdd6dfff Memory Mapped File rwx False False False -
gdi32.dll 0x7fefed10000 0x7fefed76fff Memory Mapped File rwx False False False -
msctf.dll 0x7fefed80000 0x7fefee88fff Memory Mapped File rwx False False False -
advapi32.dll 0x7feff0f0000 0x7feff1cafff Memory Mapped File rwx False False False -
rpcrt4.dll 0x7feff1d0000 0x7feff2fcfff Memory Mapped File rwx False False False -
sechost.dll 0x7feff850000 0x7feff86efff Memory Mapped File rwx False False False -
msvcrt.dll 0x7feffa80000 0x7feffb1efff Memory Mapped File rwx False False False -
apisetschema.dll 0x7feffb80000 0x7feffb80fff Memory Mapped File rwx False False False -
pagefile_0x000007fffffb0000 0x7fffffb0000 0x7fffffd2fff Pagefile Backed Memory r True False False -
private_0x000007fffffdc000 0x7fffffdc000 0x7fffffddfff Private Memory rw True False False -
private_0x000007fffffde000 0x7fffffde000 0x7fffffdefff Private Memory rw True False False -
Process #4: vssadmin.exe
0 0
»
Information Value
ID #4
File Name c:\windows\system32\vssadmin.exe
Command Line vssadmin delete shadows /all /quiet
Initial Working Directory C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
Monitor Start Time: 00:00:46, Reason: Child Process
Unmonitor End Time: 00:01:13, Reason: Self Terminated
Monitor Duration 00:00:27
Remark No high level activity detected in monitored regions
OS Process Information
»
Information Value
PID 0x6fc
Parent PID 0x20c (c:\windows\system32\cmd.exe)
Is Created or Modified Executable False
Integrity Level High (Elevated)
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x 110
0x 358
0x 790
0x 328
0x 75C
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory rw True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000020000 0x00020000 0x0002ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000030000 0x00030000 0x00033fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000040000 0x00040000 0x00040fff Pagefile Backed Memory r True False False -
private_0x0000000000050000 0x00050000 0x000cffff Private Memory rw True False False -
locale.nls 0x000d0000 0x00136fff Memory Mapped File r False False False -
pagefile_0x0000000000140000 0x00140000 0x00146fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000150000 0x00150000 0x00151fff Pagefile Backed Memory rw True False False -
private_0x0000000000160000 0x00160000 0x0016ffff Private Memory rw True False False -
private_0x0000000000170000 0x00170000 0x0026ffff Private Memory rw True False False -
vssadmin.exe.mui 0x00270000 0x0027cfff Memory Mapped File rw False False False -
private_0x0000000000280000 0x00280000 0x0037ffff Private Memory rw True False False -
pagefile_0x0000000000380000 0x00380000 0x00507fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000510000 0x00510000 0x00690fff Pagefile Backed Memory r True False False -
pagefile_0x00000000006a0000 0x006a0000 0x01a9ffff Pagefile Backed Memory r True False False -
private_0x0000000001aa0000 0x01aa0000 0x01aa0fff Private Memory rw True False False -
private_0x0000000001ab0000 0x01ab0000 0x01ab0fff Private Memory rw True False False -
c_1251.nls 0x01ac0000 0x01ad0fff Memory Mapped File r False False False -
pagefile_0x0000000001ae0000 0x01ae0000 0x01ae0fff Pagefile Backed Memory r True False False -
pagefile_0x0000000001af0000 0x01af0000 0x01af0fff Pagefile Backed Memory r True False False -
private_0x0000000001c00000 0x01c00000 0x01c7ffff Private Memory rw True False False -
private_0x0000000001ca0000 0x01ca0000 0x01d1ffff Private Memory rw True False False -
private_0x0000000001d70000 0x01d70000 0x01deffff Private Memory rw True False False -
sortdefault.nls 0x01df0000 0x020befff Memory Mapped File r False False False -
private_0x0000000002170000 0x02170000 0x021effff Private Memory rw True False False -
user32.dll 0x77640000 0x77739fff Memory Mapped File rwx False False False -
kernel32.dll 0x77740000 0x7785efff Memory Mapped File rwx False False False -
ntdll.dll 0x77860000 0x77a08fff Memory Mapped File rwx False False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory r True False False -
pagefile_0x000000007efe0000 0x7efe0000 0x7f0dffff Pagefile Backed Memory r True False False -
private_0x000000007f0e0000 0x7f0e0000 0x7ffdffff Private Memory r True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
vssadmin.exe 0xffa30000 0xffa5cfff Memory Mapped File rwx False False False -
vsstrace.dll 0x7fef7e80000 0x7fef7e96fff Memory Mapped File rwx False False False -
vssapi.dll 0x7fef7ea0000 0x7fef804ffff Memory Mapped File rwx False False False -
vss_ps.dll 0x7fef9000000 0x7fef9013fff Memory Mapped File rwx False False False -
atl.dll 0x7fefb260000 0x7fefb278fff Memory Mapped File rwx False False False -
rsaenh.dll 0x7fefcda0000 0x7fefcde6fff Memory Mapped File rwx False False False -
cryptsp.dll 0x7fefd0a0000 0x7fefd0b6fff Memory Mapped File rwx False False False -
cryptbase.dll 0x7fefd6a0000 0x7fefd6aefff Memory Mapped File rwx False False False -
rpcrtremote.dll 0x7fefd790000 0x7fefd7a3fff Memory Mapped File rwx False False False -
kernelbase.dll 0x7fefd900000 0x7fefd96afff Memory Mapped File rwx False False False -
usp10.dll 0x7fefdb80000 0x7fefdc48fff Memory Mapped File rwx False False False -
oleaut32.dll 0x7fefdc50000 0x7fefdd26fff Memory Mapped File rwx False False False -
lpk.dll 0x7fefdd30000 0x7fefdd3dfff Memory Mapped File rwx False False False -
imm32.dll 0x7fefdd40000 0x7fefdd6dfff Memory Mapped File rwx False False False -
gdi32.dll 0x7fefed10000 0x7fefed76fff Memory Mapped File rwx False False False -
msctf.dll 0x7fefed80000 0x7fefee88fff Memory Mapped File rwx False False False -
advapi32.dll 0x7feff0f0000 0x7feff1cafff Memory Mapped File rwx False False False -
rpcrt4.dll 0x7feff1d0000 0x7feff2fcfff Memory Mapped File rwx False False False -
clbcatq.dll 0x7feff560000 0x7feff5f8fff Memory Mapped File rwx False False False -
sechost.dll 0x7feff850000 0x7feff86efff Memory Mapped File rwx False False False -
ole32.dll 0x7feff870000 0x7feffa72fff Memory Mapped File rwx False False False -
msvcrt.dll 0x7feffa80000 0x7feffb1efff Memory Mapped File rwx False False False -
apisetschema.dll 0x7feffb80000 0x7feffb80fff Memory Mapped File rwx False False False -
pagefile_0x000007fffffb0000 0x7fffffb0000 0x7fffffd2fff Pagefile Backed Memory r True False False -
private_0x000007fffffd5000 0x7fffffd5000 0x7fffffd6fff Private Memory rw True False False -
private_0x000007fffffd7000 0x7fffffd7000 0x7fffffd8fff Private Memory rw True False False -
private_0x000007fffffd9000 0x7fffffd9000 0x7fffffdafff Private Memory rw True False False -
private_0x000007fffffdb000 0x7fffffdb000 0x7fffffdcfff Private Memory rw True False False -
private_0x000007fffffdd000 0x7fffffdd000 0x7fffffdefff Private Memory rw True False False -
private_0x000007fffffdf000 0x7fffffdf000 0x7fffffdffff Private Memory rw True False False -
Process #7: 1.exe
11479 0
»
Information Value
ID #7
File Name c:\programdata\microsoft\windows\start menu\programs\startup\1.exe
Command Line "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe"
Initial Working Directory C:\Windows\system32\
Monitor Start Time: 00:02:10, Reason: Autostart
Unmonitor End Time: 00:03:18, Reason: Self Terminated
Monitor Duration 00:01:08
OS Process Information
»
Information Value
PID 0x4f0
Parent PID 0x3a4 (c:\windows\system32\sdclt.exe)
Is Created or Modified Executable True
Integrity Level Medium
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege
Thread IDs
0x 4F4
0x 70C
0x 718
0x 724
0x 728
0x 72C
0x 730
0x 738
0x 748
0x 74C
0x 750
0x 754
0x 758
0x 75C
0x 760
0x 764
0x 770
0x 774
0x 778
0x 780
0x 784
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory rw True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000020000 0x00020000 0x00020fff Pagefile Backed Memory r True False False -
private_0x0000000000030000 0x00030000 0x00031fff Private Memory rw True False False -
private_0x0000000000030000 0x00030000 0x00030fff Private Memory rw True False False -
apisetschema.dll 0x00040000 0x00040fff Memory Mapped File rwx False False False -
private_0x0000000000050000 0x00050000 0x0008ffff Private Memory rw True False False -
private_0x0000000000090000 0x00090000 0x0018ffff Private Memory rw True False False -
pagefile_0x0000000000190000 0x00190000 0x00193fff Pagefile Backed Memory r True False False -
locale.nls 0x001a0000 0x00206fff Memory Mapped File r False False False -
pagefile_0x0000000000210000 0x00210000 0x00397fff Pagefile Backed Memory r True False False -
private_0x00000000003a0000 0x003a0000 0x003a0fff Private Memory rw True False False -
private_0x00000000003b0000 0x003b0000 0x003b0fff Private Memory rw True False False -
private_0x00000000003c0000 0x003c0000 0x003cffff Private Memory rw True False False -
pagefile_0x00000000003c0000 0x003c0000 0x003cafff Pagefile Backed Memory rw True False False -
private_0x00000000003c0000 0x003c0000 0x003c0fff Private Memory rw True False False -
pagefile_0x00000000003d0000 0x003d0000 0x003dafff Pagefile Backed Memory rw True False False -
private_0x00000000003d0000 0x003d0000 0x003d0fff Private Memory rw True False False -
private_0x00000000003d0000 0x003d0000 0x003dffff Private Memory rw True False False -
pagefile_0x00000000003d0000 0x003d0000 0x003d3fff Pagefile Backed Memory rw True False False -
pagefile_0x00000000003d0000 0x003d0000 0x003d0fff Pagefile Backed Memory rw True False False -
private_0x00000000003e0000 0x003e0000 0x003effff Private Memory rw True False False -
private_0x00000000003e0000 0x003e0000 0x003e0fff Private Memory rw True False False -
private_0x00000000003f0000 0x003f0000 0x003fffff Private Memory rw True False False -
1.exe 0x00400000 0x00887fff Memory Mapped File rwx True True False
...
pagefile_0x0000000000890000 0x00890000 0x00a10fff Pagefile Backed Memory r True False False -
private_0x0000000000a20000 0x00a20000 0x00a7ffff Private Memory rw True False False -
private_0x0000000000a20000 0x00a20000 0x00a50fff Private Memory rw True False False -
private_0x0000000000a20000 0x00a20000 0x00a5ffff Private Memory rw True False False -
private_0x0000000000a60000 0x00a60000 0x00a60fff Private Memory rwx True False False -
private_0x0000000000a70000 0x00a70000 0x00a70fff Private Memory rwx True False False -
pagefile_0x0000000000a70000 0x00a70000 0x00a73fff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000a70000 0x00a70000 0x00a76fff Pagefile Backed Memory r True False False -
private_0x0000000000a80000 0x00a80000 0x00afffff Private Memory rw True False False -
private_0x0000000000b00000 0x00b00000 0x00b01fff Private Memory rwx True False False -
pagefile_0x0000000000b00000 0x00b00000 0x00b01fff Pagefile Backed Memory rw True False False -
private_0x0000000000b10000 0x00b10000 0x00b1ffff Private Memory rwx True False False -
pagefile_0x0000000000b10000 0x00b10000 0x00b13fff Pagefile Backed Memory rw True False False -
private_0x0000000000b20000 0x00b20000 0x00b21fff Private Memory rwx True False False -
pagefile_0x0000000000b20000 0x00b20000 0x00b23fff Pagefile Backed Memory rw True False False -
private_0x0000000000b30000 0x00b30000 0x00b30fff Private Memory rwx True False False -
private_0x0000000000b40000 0x00b40000 0x00b7ffff Private Memory rw True False False -
private_0x0000000000ba0000 0x00ba0000 0x00baffff Private Memory rw True False False -
private_0x0000000000bb0000 0x00bb0000 0x00caffff Private Memory rw True False False -
private_0x0000000000cb0000 0x00cb0000 0x00ceffff Private Memory rw True False False -
private_0x0000000000cf0000 0x00cf0000 0x00deffff Private Memory rw True False False -
pagefile_0x0000000000df0000 0x00df0000 0x021effff Pagefile Backed Memory r True False False -
pagefile_0x00000000021f0000 0x021f0000 0x025fffff Pagefile Backed Memory rw True False False -
sortdefault.nls 0x021f0000 0x024befff Memory Mapped File r False False False -
1.exe 0x024c0000 0x02674fff Memory Mapped File r True False False -
private_0x00000000024c0000 0x024c0000 0x025c0fff Private Memory rw True False False -
private_0x00000000024c0000 0x024c0000 0x025bffff Private Memory rw True False False -
private_0x00000000025c0000 0x025c0000 0x026bffff Private Memory rw True False False -
pagefile_0x0000000002600000 0x02600000 0x02a0ffff Pagefile Backed Memory rw True False False -
private_0x00000000026c0000 0x026c0000 0x026fffff Private Memory rw True False False -
private_0x0000000002700000 0x02700000 0x027fffff Private Memory rw True False False -
private_0x0000000002800000 0x02800000 0x0283ffff Private Memory rw True False False -
private_0x0000000002840000 0x02840000 0x0293ffff Private Memory rw True False False -
private_0x0000000002940000 0x02940000 0x0297ffff Private Memory rw True False False -
private_0x0000000002980000 0x02980000 0x02a7ffff Private Memory rw True False False -
pagefile_0x0000000002a80000 0x02a80000 0x02e72fff Pagefile Backed Memory r True False False -
private_0x0000000002e80000 0x02e80000 0x02ebffff Private Memory rw True False False -
private_0x0000000002ec0000 0x02ec0000 0x02fbffff Private Memory rw True False False -
private_0x0000000002fc0000 0x02fc0000 0x02ffffff Private Memory rw True False False -
private_0x0000000003000000 0x03000000 0x030fffff Private Memory rw True False False -
private_0x0000000003100000 0x03100000 0x0313ffff Private Memory rw True False False -
private_0x0000000003140000 0x03140000 0x0323ffff Private Memory rw True False False -
private_0x0000000003240000 0x03240000 0x0327ffff Private Memory rw True False False -
private_0x0000000003280000 0x03280000 0x0337ffff Private Memory rw True False False -
private_0x0000000003380000 0x03380000 0x033bffff Private Memory rw True False False -
private_0x00000000033c0000 0x033c0000 0x034bffff Private Memory rw True False False -
private_0x00000000034c0000 0x034c0000 0x034fffff Private Memory rw True False False -
private_0x0000000003500000 0x03500000 0x035fffff Private Memory rw True False False -
private_0x0000000003600000 0x03600000 0x0363ffff Private Memory rw True False False -
private_0x0000000003640000 0x03640000 0x0373ffff Private Memory rw True False False -
private_0x0000000003740000 0x03740000 0x0377ffff Private Memory rw True False False -
private_0x0000000003780000 0x03780000 0x0387ffff Private Memory rw True False False -
private_0x0000000003880000 0x03880000 0x038bffff Private Memory rw True False False -
private_0x00000000038c0000 0x038c0000 0x039bffff Private Memory rw True False False -
private_0x00000000039c0000 0x039c0000 0x039fffff Private Memory rw True False False -
private_0x0000000003a00000 0x03a00000 0x03afffff Private Memory rw True False False -
private_0x0000000003b00000 0x03b00000 0x03b3ffff Private Memory rw True False False -
private_0x0000000003b40000 0x03b40000 0x03c3ffff Private Memory rw True False False -
private_0x0000000003c40000 0x03c40000 0x03d40fff Private Memory rw True False False -
private_0x0000000003d50000 0x03d50000 0x03e50fff Private Memory rw True False False -
private_0x0000000003ee0000 0x03ee0000 0x03f1ffff Private Memory rw True False False -
private_0x0000000003f20000 0x03f20000 0x0401ffff Private Memory rw True False False -
private_0x0000000004020000 0x04020000 0x04120fff Private Memory rw True False False -
uxtheme.dll 0x735d0000 0x7364ffff Memory Mapped File rwx False False False -
comctl32.dll 0x73650000 0x736d3fff Memory Mapped File rwx False False False -
wow64cpu.dll 0x73880000 0x73887fff Memory Mapped File rwx False False False -
wow64win.dll 0x73890000 0x738ebfff Memory Mapped File rwx False False False -
wow64.dll 0x738f0000 0x7392efff Memory Mapped File rwx False False False -
davhlpr.dll 0x74c70000 0x74c77fff Memory Mapped File rwx False False False -
davclnt.dll 0x74c80000 0x74c96fff Memory Mapped File rwx False False False -
ntlanman.dll 0x74ca0000 0x74cb3fff Memory Mapped File rwx False False False -
winsta.dll 0x74cc0000 0x74ce8fff Memory Mapped File rwx False False False -
drprov.dll 0x74cf0000 0x74cf7fff Memory Mapped File rwx False False False -
mpr.dll 0x74d00000 0x74d11fff Memory Mapped File rwx False False False -
winmm.dll 0x74e10000 0x74e41fff Memory Mapped File rwx False False False -
cryptbase.dll 0x74e60000 0x74e6bfff Memory Mapped File rwx False False False -
sspicli.dll 0x74e70000 0x74ecffff Memory Mapped File rwx False False False -
kernelbase.dll 0x74ed0000 0x74f15fff Memory Mapped File rwx False False False -
sechost.dll 0x751d0000 0x751e8fff Memory Mapped File rwx False False False -
ws2_32.dll 0x751f0000 0x75224fff Memory Mapped File rwx False False False -
usp10.dll 0x75250000 0x752ecfff Memory Mapped File rwx False False False -
shell32.dll 0x75300000 0x75f49fff Memory Mapped File rwx False False False -
imagehlp.dll 0x75f50000 0x75f79fff Memory Mapped File rwx False False False -
rpcrt4.dll 0x75f80000 0x7606ffff Memory Mapped File rwx False False False -
kernel32.dll 0x760a0000 0x761affff Memory Mapped File rwx False False False -
msvcrt.dll 0x761b0000 0x7625bfff Memory Mapped File rwx False False False -
ole32.dll 0x76550000 0x766abfff Memory Mapped File rwx False False False -
nsi.dll 0x766b0000 0x766b5fff Memory Mapped File rwx False False False -
imm32.dll 0x766c0000 0x7671ffff Memory Mapped File rwx False False False -
advapi32.dll 0x76720000 0x767bffff Memory Mapped File rwx False False False -
shlwapi.dll 0x767c0000 0x76816fff Memory Mapped File rwx False False False -
lpk.dll 0x769d0000 0x769d9fff Memory Mapped File rwx False False False -
gdi32.dll 0x76a70000 0x76afffff Memory Mapped File rwx False False False -
user32.dll 0x76bb0000 0x76caffff Memory Mapped File rwx False False False -
msctf.dll 0x76df0000 0x76ebbfff Memory Mapped File rwx False False False -
private_0x0000000076f10000 0x76f10000 0x77009fff Private Memory rwx True False False -
private_0x0000000077010000 0x77010000 0x7712efff Private Memory rwx True False False -
ntdll.dll 0x77130000 0x772d8fff Memory Mapped File rwx False False False -
ntdll.dll 0x77310000 0x7748ffff Memory Mapped File rwx False False False -
private_0x000000007ef83000 0x7ef83000 0x7ef85fff Private Memory rw True False False -
private_0x000000007ef86000 0x7ef86000 0x7ef88fff Private Memory rw True False False -
private_0x000000007ef89000 0x7ef89000 0x7ef8bfff Private Memory rw True False False -
private_0x000000007ef8c000 0x7ef8c000 0x7ef8efff Private Memory rw True False False -
private_0x000000007ef8f000 0x7ef8f000 0x7ef91fff Private Memory rw True False False -
private_0x000000007ef92000 0x7ef92000 0x7ef94fff Private Memory rw True False False -
private_0x000000007ef95000 0x7ef95000 0x7ef97fff Private Memory rw True False False -
private_0x000000007ef98000 0x7ef98000 0x7ef9afff Private Memory rw True False False -
private_0x000000007ef9b000 0x7ef9b000 0x7ef9dfff Private Memory rw True False False -
private_0x000000007ef9e000 0x7ef9e000 0x7efa0fff Private Memory rw True False False -
private_0x000000007efa1000 0x7efa1000 0x7efa3fff Private Memory rw True False False -
private_0x000000007efa4000 0x7efa4000 0x7efa6fff Private Memory rw True False False -
private_0x000000007efa7000 0x7efa7000 0x7efa9fff Private Memory rw True False False -
private_0x000000007efaa000 0x7efaa000 0x7efacfff Private Memory rw True False False -
private_0x000000007efad000 0x7efad000 0x7efaffff Private Memory rw True False False -
pagefile_0x000000007efb0000 0x7efb0000 0x7efd2fff Pagefile Backed Memory r True False False -
private_0x000000007efd5000 0x7efd5000 0x7efd7fff Private Memory rw True False False -
private_0x000000007efd8000 0x7efd8000 0x7efdafff Private Memory rw True False False -
private_0x000000007efdb000 0x7efdb000 0x7efddfff Private Memory rw True False False -
private_0x000000007efde000 0x7efde000 0x7efdefff Private Memory rw True False False -
private_0x000000007efdf000 0x7efdf000 0x7efdffff Private Memory rw True False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory r True False False -
pagefile_0x000000007efe0000 0x7efe0000 0x7f0dffff Pagefile Backed Memory r True False False -
private_0x000000007f0e0000 0x7f0e0000 0x7ffdffff Private Memory r True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
private_0x000000007fff0000 0x7fff0000 0x7fffffeffff Private Memory r True False False -
For performance reasons, the remaining 71 entries are omitted.
The remaining entries can be found in flog.txt.
Hook Information
»
Type Installer Target Size Information Actions
Code 1.exe:+0x111060 ntdll.dll:DbgBreakPoint+0x0 1 bytes -
...
Threads
Thread 0x4f4
160 0
»
Category Operation Information Success Count Logfile
Module Load module_name = USER32.dll, base_address = 0x76bb0000 True 1
Fn
Module Load module_name = ADVAPI32.dll, base_address = 0x76720000 True 1
Fn
Module Load module_name = NTDLL.dll, base_address = 0x77310000 True 1
Fn
System Get Time type = Local Time, time = 2019-01-23 21:45:49 (Local Time) True 1
Fn
File Create filename = \\.\SICE, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = \\.\SIWVID, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = \\.\NTICE, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
System Get Info type = Operating System True 1
Fn
Registry Open Key reg_name = HKEY_CURRENT_USER\Software\Wine False 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__ False 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = GetNativeSystemInfo, address_out = 0x760c10b5 True 1
Fn
System Get Info type = Hardware Information True 1
Fn
System Get Info type = Operating System True 1
Fn
Module Load module_name = winmm.dll, base_address = 0x74e10000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\winmm.dll, function = timeGetTime, address_out = 0x74e126e0 True 1
Fn
System Sleep duration = 50 milliseconds (0.050 seconds) True 1
Fn
System Get Info type = Operating System True 1
Fn
System Get Info type = System Directory, result_out = C:\Windows\system32 True 1
Fn
Debug Print process_name = c:\programdata\microsoft\windows\start menu\programs\startup\1.exe, type = DEBUG_STRING, text = %s------------------------------------------------ --- Themida Professional --- --- (c)2012 Oreans Technologies --- ------------------------------------------------ True 1
Fn
Module Load module_name = NTDLL, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtOpenThread, address_out = 0x77331128 True 1
Fn
Module Load module_name = winmm.dll, base_address = 0x74e10000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\winmm.dll, function = timeGetTime, address_out = 0x74e126e0 True 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000 True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000, value_name = DriverDesc, data = 83 True 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\Hardware\description\System True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Hardware\description\System, value_name = SystemBiosVersion, data = 80 True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Hardware\description\System, value_name = VideoBiosVersion, data = 80 False 1
Fn
Window Find class_name = OLLYDBG False 1
Fn
Window Find class_name = GBDYLLO False 1
Fn
Window Find class_name = pediy06 False 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x7732fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x7732fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x7732fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x7732fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
System Get Info type = System Directory, result_out = C:\Windows\system32 True 1
Fn
File Create filename = C:\Windows\system32\ntdll.dll, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_SYSTEM, share_mode = FILE_SHARE_READ True 1
Fn
File Read filename = C:\Windows\system32\ntdll.dll, size = 32, size_out = 32 True 1
Fn
Data
Debug Check for Presence c:\programdata\microsoft\windows\start menu\programs\startup\1.exe True 1
Fn
System Get Info type = Operating System True 1
Fn
Debug Check for Presence c:\programdata\microsoft\windows\start menu\programs\startup\1.exe True 1
Fn
Debug Hide c:\programdata\microsoft\windows\start menu\programs\startup\1.exe True 1
Fn
Debug Check for Presence c:\programdata\microsoft\windows\start menu\programs\startup\1.exe True 1
Fn
Window Find class_name = FilemonClass False 1
Fn
Window Find window_name = File Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Window Find class_name = PROCMON_WINDOW_CLASS False 1
Fn
Window Find window_name = Process Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x7732fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Window Find class_name = RegmonClass False 1
Fn
Window Find window_name = Registry Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Window Find class_name = 18467-41 False 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x7732fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Filename process_name = c:\programdata\microsoft\windows\start menu\programs\startup\1.exe, file_name_orig = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 256 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = RtlAllocateHeap, address_out = 0x7733e026 True 1
Fn
System Get Info type = Operating System True 1
Fn
Module Load module_name = KERNEL32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Filename process_name = c:\programdata\microsoft\windows\start menu\programs\startup\1.exe, file_name_orig = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 512 True 1
Fn
File Create filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ True 1
Fn
Module Create Mapping module_name = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, protection = PAGE_READONLY, maximum_size = 0 True 1
Fn
Module Map C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, process_name = c:\programdata\microsoft\windows\start menu\programs\startup\1.exe, desired_access = FILE_MAP_READ True 1
Fn
Module Load module_name = imagehlp.dll, base_address = 0x75f50000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\imagehlp.dll, function = CheckSumMappedFile, address_out = 0x75f58303 True 1
Fn
Module Unmap process_name = c:\programdata\microsoft\windows\start menu\programs\startup\1.exe True 1
Fn
System Get Time type = Local Time, time = 2019-01-23 21:46:03 (Local Time) True 1
Fn
Debug Check for Presence c:\programdata\microsoft\windows\start menu\programs\startup\1.exe True 1
Fn
Window Find class_name = FilemonClass False 1
Fn
Window Find window_name = File Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Window Find class_name = PROCMON_WINDOW_CLASS False 1
Fn
Window Find window_name = Process Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x7732fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77310000 True 2
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = RtlAllocateHeap, address_out = 0x7733e026 True 1
Fn
System Get Time type = Ticks, time = 41901 True 3
Fn
System Get Info type = Operating System True 1
Fn
Mutex Open mutex_name = Global\syncronize_6LSDY1A, desired_access = SYNCHRONIZE False 1
Fn
Mutex Create mutex_name = Global\syncronize_6LSDY1A True 1
Fn
Mutex Open mutex_name = Global\syncronize_6LSDY1U, desired_access = SYNCHRONIZE False 1
Fn
Mutex Create mutex_name = Global\syncronize_6LSDY1U True 1
Fn
System Get Info type = Operating System True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Module Get Filename process_name = c:\programdata\microsoft\windows\start menu\programs\startup\1.exe, file_name_orig = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 32767 True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
File Create filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ True 1
Fn
File Create filename = C:\Windows\System32\1.exe, desired_access = GENERIC_WRITE False 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
File Create filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\1.exe, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 1048576, size_out = 1048576 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\1.exe, size = 1048576 True 1
Fn
Data
File Read filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 1048576, size_out = 738816 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\1.exe, size = 738816 True 1
Fn
Data
File Read filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 1048576, size_out = 0 True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run True 1
Fn
Registry Write Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run, value_name = 1.exe, data = 13835024, size = 102, type = REG_SZ False 1
Fn
Registry Open Key reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run True 1
Fn
Registry Write Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run, value_name = 1.exe, data = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\1.exe, size = 102, type = REG_SZ True 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, value_name = Startup, data = 83, type = REG_NONE False 1
Fn
Registry Open Key reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, value_name = Startup, data = %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup, type = REG_EXPAND_SZ True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
File Create filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 1048576, size_out = 1048576 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 1048576 True 1
Fn
Data
File Read filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 1048576, size_out = 738816 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 738816 True 1
Fn
Data
File Read filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 1048576, size_out = 0 True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, value_name = Common Startup, data = %ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup, type = REG_EXPAND_SZ True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
File Create filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ True 1
Fn
File Create filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, desired_access = GENERIC_WRITE False 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
File Create Pipe pipe_name = Anonymous read pipe, size = 0 True 1
Fn
File Create Pipe pipe_name = Anonymous read pipe, size = 0 True 1
Fn
Process Create process_name = C:\Windows\system32\cmd.exe, os_pid = 0x710, startup_flags = STARTF_USESHOWWINDOW, STARTF_USESTDHANDLES, show_window = SW_HIDE True 1
Fn
File Write size = 65 True 1
Fn
Data
File Create Pipe pipe_name = Anonymous read pipe, size = 0 True 1
Fn
File Create Pipe pipe_name = Anonymous read pipe, size = 0 True 1
Fn
Process Create process_name = C:\Windows\system32\cmd.exe, os_pid = 0x5ec, startup_flags = STARTF_USESHOWWINDOW, STARTF_USESTDHANDLES, show_window = SW_HIDE True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107300.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 65 True 1
Fn
Data
Thread 0x718
196 0
»
Category Operation Information Success Count Logfile
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Thread 0x724
26 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
Module Get Filename process_name = c:\programdata\microsoft\windows\start menu\programs\startup\1.exe, file_name_orig = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 32767 True 1
Fn
Process Create process_name = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, show_window = SW_SHOWNORMAL True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 20
Fn
Thread 0x728
30 0
»
Category Operation Information Success Count Logfile
System Get Computer Name result_out = XDUWTFONO True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 93
Fn
Thread 0x72c
185 0
»
Category Operation Information Success Count Logfile
System Get Time type = Ticks, time = 42510 True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Get Time type = Ticks, time = 42759 True 1
Fn
System Get Time type = Ticks, time = 42962 True 1
Fn
System Get Time type = Ticks, time = 43227 True 1
Fn
System Get Time type = Ticks, time = 43415 True 1
Fn
System Get Time type = Ticks, time = 43555 True 2
Fn
System Get Time type = Ticks, time = 43727 True 1
Fn
System Get Time type = Ticks, time = 43836 True 1
Fn
System Get Time type = Ticks, time = 43961 True 1
Fn
System Get Time type = Ticks, time = 44070 True 1
Fn
System Get Time type = Ticks, time = 44413 True 1
Fn
System Get Time type = Ticks, time = 45068 True 2
Fn
System Get Time type = Ticks, time = 45271 True 1
Fn
System Get Time type = Ticks, time = 45489 True 1
Fn
System Get Time type = Ticks, time = 45614 True 1
Fn
System Get Time type = Ticks, time = 45723 True 1
Fn
System Get Time type = Ticks, time = 45895 True 1
Fn
System Get Time type = Ticks, time = 46035 True 1
Fn
System Get Time type = Ticks, time = 46160 True 2
Fn
System Get Time type = Ticks, time = 46488 True 1
Fn
System Get Time type = Ticks, time = 46659 True 1
Fn
System Get Time type = Ticks, time = 46956 True 1
Fn
System Get Time type = Ticks, time = 47143 True 1
Fn
System Get Time type = Ticks, time = 47627 True 2
Fn
System Get Time type = Ticks, time = 47892 True 1
Fn
System Get Time type = Ticks, time = 48375 True 1
Fn
System Get Time type = Ticks, time = 48641 True 2
Fn
System Get Time type = Ticks, time = 48797 True 1
Fn
System Get Time type = Ticks, time = 48953 True 1
Fn
System Get Time type = Ticks, time = 49265 True 1
Fn
System Get Time type = Ticks, time = 49389 True 1
Fn
System Get Time type = Ticks, time = 49811 True 2
Fn
System Get Time type = Ticks, time = 50013 True 1
Fn
System Get Time type = Ticks, time = 50201 True 1
Fn
System Get Time type = Ticks, time = 50466 True 1
Fn
System Get Time type = Ticks, time = 50778 True 1
Fn
System Get Time type = Ticks, time = 51121 True 2
Fn
System Get Time type = Ticks, time = 51339 True 1
Fn
System Get Time type = Ticks, time = 51901 True 1
Fn
System Get Time type = Ticks, time = 52151 True 2
Fn
System Get Time type = Ticks, time = 52447 True 1
Fn
System Get Time type = Ticks, time = 52946 True 1
Fn
System Get Time type = Ticks, time = 53383 True 2
Fn
System Get Time type = Ticks, time = 53820 True 1
Fn
System Get Time type = Ticks, time = 54225 True 1
Fn
System Get Time type = Ticks, time = 54537 True 2
Fn
System Get Time type = Ticks, time = 54678 True 1
Fn
System Get Time type = Ticks, time = 55083 True 1
Fn
System Get Time type = Ticks, time = 55333 True 1
Fn
System Get Time type = Ticks, time = 55629 True 2
Fn
System Get Time type = Ticks, time = 55895 True 1
Fn
System Get Time type = Ticks, time = 56550 True 1
Fn
System Get Time type = Ticks, time = 57018 True 2
Fn
System Get Time type = Ticks, time = 57439 True 1
Fn
System Get Time type = Ticks, time = 57673 True 1
Fn
System Get Time type = Ticks, time = 58094 True 2
Fn
System Get Time type = Ticks, time = 58671 True 1
Fn
System Get Time type = Ticks, time = 58843 True 1
Fn
System Get Time type = Ticks, time = 59139 True 2
Fn
System Get Time type = Ticks, time = 59483 True 1
Fn
System Get Time type = Ticks, time = 59795 True 1
Fn
System Get Time type = Ticks, time = 59951 True 1
Fn
System Get Time type = Ticks, time = 60060 True 1
Fn
System Get Time type = Ticks, time = 60528 True 2
Fn
System Get Time type = Ticks, time = 60715 True 1
Fn
System Get Time type = Ticks, time = 60933 True 1
Fn
System Get Time type = Ticks, time = 61105 True 1
Fn
System Get Time type = Ticks, time = 61433 True 1
Fn
System Get Time type = Ticks, time = 61745 True 2
Fn
System Get Time type = Ticks, time = 61901 True 1
Fn
System Get Time type = Ticks, time = 62025 True 1
Fn
System Get Time type = Ticks, time = 62306 True 1
Fn
System Get Time type = Ticks, time = 62868 True 2
Fn
System Get Time type = Ticks, time = 63180 True 1
Fn
System Get Time type = Ticks, time = 63336 True 1
Fn
System Get Time type = Ticks, time = 63632 True 1
Fn
System Get Time type = Ticks, time = 63976 True 2
Fn
System Get Time type = Ticks, time = 64194 True 1
Fn
System Get Time type = Ticks, time = 64319 True 1
Fn
System Get Time type = Ticks, time = 64662 True 1
Fn
System Get Time type = Ticks, time = 64927 True 1
Fn
System Get Time type = Ticks, time = 65099 True 2
Fn
System Get Time type = Ticks, time = 65536 True 1
Fn
System Get Time type = Ticks, time = 65879 True 1
Fn
System Get Time type = Ticks, time = 66113 True 2
Fn
System Get Time type = Ticks, time = 66550 True 1
Fn
System Get Time type = Ticks, time = 66659 True 1
Fn
System Get Time type = Ticks, time = 66862 True 1
Fn
System Get Time type = Ticks, time = 67174 True 2
Fn
System Get Time type = Ticks, time = 67626 True 1
Fn
System Get Time type = Ticks, time = 67782 True 1
Fn
System Get Time type = Ticks, time = 68032 True 1
Fn
System Get Time type = Ticks, time = 68749 True 2
Fn
System Get Time type = Ticks, time = 68874 True 1
Fn
System Get Time type = Ticks, time = 69124 True 1
Fn
System Get Time type = Ticks, time = 69560 True 1
Fn
System Get Time type = Ticks, time = 69810 True 2
Fn
System Get Time type = Ticks, time = 70325 True 1
Fn
System Get Time type = Ticks, time = 70637 True 1
Fn
System Get Time type = Ticks, time = 70777 True 1
Fn
System Get Time type = Ticks, time = 71042 True 2
Fn
System Get Time type = Ticks, time = 71417 True 1
Fn
System Get Time type = Ticks, time = 71604 True 1
Fn
System Get Time type = Ticks, time = 71807 True 1
Fn
System Get Time type = Ticks, time = 71963 True 1
Fn
System Get Time type = Ticks, time = 72244 True 2
Fn
System Get Time type = Ticks, time = 72368 True 1
Fn
System Get Time type = Ticks, time = 72524 True 1
Fn
System Get Time type = Ticks, time = 72649 True 1
Fn
System Get Time type = Ticks, time = 72930 True 1
Fn
System Get Time type = Ticks, time = 73258 True 2
Fn
System Get Time type = Ticks, time = 73429 True 1
Fn
System Get Time type = Ticks, time = 73632 True 1
Fn
System Get Time type = Ticks, time = 73804 True 1
Fn
System Get Time type = Ticks, time = 74038 True 1
Fn
System Get Time type = Ticks, time = 74303 True 2
Fn
System Get Time type = Ticks, time = 74506 True 1
Fn
System Get Time type = Ticks, time = 74740 True 1
Fn
System Get Time type = Ticks, time = 74942 True 1
Fn
System Get Time type = Ticks, time = 75130 True 1
Fn
System Get Time type = Ticks, time = 75410 True 2
Fn
System Get Time type = Ticks, time = 75644 True 1
Fn
System Get Time type = Ticks, time = 75847 True 1
Fn
System Get Time type = Ticks, time = 76019 True 1
Fn
System Get Time type = Ticks, time = 76190 True 1
Fn
System Get Time type = Ticks, time = 76378 True 1
Fn
System Get Time type = Ticks, time = 76534 True 2
Fn
System Get Time type = Ticks, time = 76721 True 1
Fn
System Get Time type = Ticks, time = 76830 True 1
Fn
System Get Time type = Ticks, time = 76970 True 1
Fn
System Get Time type = Ticks, time = 77095 True 1
Fn
System Get Time type = Ticks, time = 77298 True 1
Fn
System Get Time type = Ticks, time = 77626 True 2
Fn
System Get Time type = Ticks, time = 77797 True 1
Fn
System Get Time type = Ticks, time = 78000 True 1
Fn
System Get Time type = Ticks, time = 78109 True 1
Fn
System Get Time type = Ticks, time = 78343 True 1
Fn
System Get Time type = Ticks, time = 78608 True 1
Fn
System Get Time type = Ticks, time = 78718 True 2
Fn
System Get Time type = Ticks, time = 78936 True 1
Fn
System Get Time type = Ticks, time = 79076 True 1
Fn
System Get Time type = Ticks, time = 79201 True 1
Fn
System Get Time type = Ticks, time = 79373 True 1
Fn
System Get Time type = Ticks, time = 79513 True 1
Fn
System Get Time type = Ticks, time = 79685 True 1
Fn
System Get Time type = Ticks, time = 79810 True 2
Fn
System Get Time type = Ticks, time = 79981 True 1
Fn
System Get Time type = Ticks, time = 80184 True 1
Fn
System Sleep duration = -1 (infinite) True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
Thread 0x730
185 0
»
Category Operation Information Success Count Logfile
System Get Time type = Ticks, time = 42510 True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Get Time type = Ticks, time = 42759 True 1
Fn
System Get Time type = Ticks, time = 42962 True 1
Fn
System Get Time type = Ticks, time = 43227 True 1
Fn
System Get Time type = Ticks, time = 43415 True 1
Fn
System Get Time type = Ticks, time = 43555 True 2
Fn
System Get Time type = Ticks, time = 43727 True 1
Fn
System Get Time type = Ticks, time = 43836 True 1
Fn
System Get Time type = Ticks, time = 43961 True 1
Fn
System Get Time type = Ticks, time = 44070 True 1
Fn
System Get Time type = Ticks, time = 44413 True 1
Fn
System Get Time type = Ticks, time = 45068 True 2
Fn
System Get Time type = Ticks, time = 45271 True 1
Fn
System Get Time type = Ticks, time = 45489 True 1
Fn
System Get Time type = Ticks, time = 45614 True 1
Fn
System Get Time type = Ticks, time = 45723 True 1
Fn
System Get Time type = Ticks, time = 45895 True 1
Fn
System Get Time type = Ticks, time = 46035 True 1
Fn
System Get Time type = Ticks, time = 46160 True 2
Fn
System Get Time type = Ticks, time = 46488 True 1
Fn
System Get Time type = Ticks, time = 46659 True 1
Fn
System Get Time type = Ticks, time = 46956 True 1
Fn
System Get Time type = Ticks, time = 47143 True 1
Fn
System Get Time type = Ticks, time = 47627 True 2
Fn
System Get Time type = Ticks, time = 47892 True 1
Fn
System Get Time type = Ticks, time = 48375 True 1
Fn
System Get Time type = Ticks, time = 48641 True 2
Fn
System Get Time type = Ticks, time = 48797 True 1
Fn
System Get Time type = Ticks, time = 48953 True 1
Fn
System Get Time type = Ticks, time = 49265 True 1
Fn
System Get Time type = Ticks, time = 49389 True 1
Fn
System Get Time type = Ticks, time = 49811 True 2
Fn
System Get Time type = Ticks, time = 50013 True 1
Fn
System Get Time type = Ticks, time = 50201 True 1
Fn
System Get Time type = Ticks, time = 50466 True 1
Fn
System Get Time type = Ticks, time = 50778 True 1
Fn
System Get Time type = Ticks, time = 51121 True 2
Fn
System Get Time type = Ticks, time = 51339 True 1
Fn
System Get Time type = Ticks, time = 51901 True 1
Fn
System Get Time type = Ticks, time = 52151 True 2
Fn
System Get Time type = Ticks, time = 52447 True 1
Fn
System Get Time type = Ticks, time = 52946 True 1
Fn
System Get Time type = Ticks, time = 53383 True 2
Fn
System Get Time type = Ticks, time = 53820 True 1
Fn
System Get Time type = Ticks, time = 54225 True 1
Fn
System Get Time type = Ticks, time = 54537 True 2
Fn
System Get Time type = Ticks, time = 54678 True 1
Fn
System Get Time type = Ticks, time = 55083 True 1
Fn
System Get Time type = Ticks, time = 55333 True 1
Fn
System Get Time type = Ticks, time = 55629 True 2
Fn
System Get Time type = Ticks, time = 55895 True 1
Fn
System Get Time type = Ticks, time = 56550 True 1
Fn
System Get Time type = Ticks, time = 57018 True 2
Fn
System Get Time type = Ticks, time = 57439 True 1
Fn
System Get Time type = Ticks, time = 57673 True 1
Fn
System Get Time type = Ticks, time = 58094 True 2
Fn
System Get Time type = Ticks, time = 58671 True 1
Fn
System Get Time type = Ticks, time = 58843 True 1
Fn
System Get Time type = Ticks, time = 59139 True 2
Fn
System Get Time type = Ticks, time = 59483 True 1
Fn
System Get Time type = Ticks, time = 59795 True 1
Fn
System Get Time type = Ticks, time = 59951 True 1
Fn
System Get Time type = Ticks, time = 60060 True 1
Fn
System Get Time type = Ticks, time = 60528 True 2
Fn
System Get Time type = Ticks, time = 60715 True 1
Fn
System Get Time type = Ticks, time = 60933 True 1
Fn
System Get Time type = Ticks, time = 61105 True 1
Fn
System Get Time type = Ticks, time = 61433 True 1
Fn
System Get Time type = Ticks, time = 61745 True 2
Fn
System Get Time type = Ticks, time = 61901 True 1
Fn
System Get Time type = Ticks, time = 62025 True 1
Fn
System Get Time type = Ticks, time = 62306 True 1
Fn
System Get Time type = Ticks, time = 62868 True 2
Fn
System Get Time type = Ticks, time = 63180 True 1
Fn
System Get Time type = Ticks, time = 63336 True 1
Fn
System Get Time type = Ticks, time = 63632 True 1
Fn
System Get Time type = Ticks, time = 63976 True 2
Fn
System Get Time type = Ticks, time = 64194 True 1
Fn
System Get Time type = Ticks, time = 64319 True 1
Fn
System Get Time type = Ticks, time = 64662 True 1
Fn
System Get Time type = Ticks, time = 64927 True 1
Fn
System Get Time type = Ticks, time = 65099 True 2
Fn
System Get Time type = Ticks, time = 65536 True 1
Fn
System Get Time type = Ticks, time = 65879 True 1
Fn
System Get Time type = Ticks, time = 66113 True 2
Fn
System Get Time type = Ticks, time = 66550 True 1
Fn
System Get Time type = Ticks, time = 66659 True 1
Fn
System Get Time type = Ticks, time = 66862 True 1
Fn
System Get Time type = Ticks, time = 67174 True 2
Fn
System Get Time type = Ticks, time = 67626 True 1
Fn
System Get Time type = Ticks, time = 67782 True 1
Fn
System Get Time type = Ticks, time = 68032 True 1
Fn
System Get Time type = Ticks, time = 68749 True 2
Fn
System Get Time type = Ticks, time = 68874 True 1
Fn
System Get Time type = Ticks, time = 69124 True 1
Fn
System Get Time type = Ticks, time = 69560 True 1
Fn
System Get Time type = Ticks, time = 69810 True 2
Fn
System Get Time type = Ticks, time = 70325 True 1
Fn
System Get Time type = Ticks, time = 70637 True 1
Fn
System Get Time type = Ticks, time = 70777 True 1
Fn
System Get Time type = Ticks, time = 71042 True 2
Fn
System Get Time type = Ticks, time = 71417 True 1
Fn
System Get Time type = Ticks, time = 71604 True 1
Fn
System Get Time type = Ticks, time = 71807 True 1
Fn
System Get Time type = Ticks, time = 71963 True 1
Fn
System Get Time type = Ticks, time = 72244 True 2
Fn
System Get Time type = Ticks, time = 72368 True 1
Fn
System Get Time type = Ticks, time = 72524 True 1
Fn
System Get Time type = Ticks, time = 72649 True 1
Fn
System Get Time type = Ticks, time = 72930 True 1
Fn
System Get Time type = Ticks, time = 73258 True 2
Fn
System Get Time type = Ticks, time = 73429 True 1
Fn
System Get Time type = Ticks, time = 73632 True 1
Fn
System Get Time type = Ticks, time = 73804 True 1
Fn
System Get Time type = Ticks, time = 74038 True 1
Fn
System Get Time type = Ticks, time = 74303 True 2
Fn
System Get Time type = Ticks, time = 74506 True 1
Fn
System Get Time type = Ticks, time = 74740 True 1
Fn
System Get Time type = Ticks, time = 74942 True 1
Fn
System Get Time type = Ticks, time = 75130 True 1
Fn
System Get Time type = Ticks, time = 75410 True 2
Fn
System Get Time type = Ticks, time = 75644 True 1
Fn
System Get Time type = Ticks, time = 75847 True 1
Fn
System Get Time type = Ticks, time = 76019 True 1
Fn
System Get Time type = Ticks, time = 76190 True 1
Fn
System Get Time type = Ticks, time = 76378 True 1
Fn
System Get Time type = Ticks, time = 76534 True 2
Fn
System Get Time type = Ticks, time = 76721 True 1
Fn
System Get Time type = Ticks, time = 76830 True 1
Fn
System Get Time type = Ticks, time = 76970 True 1
Fn
System Get Time type = Ticks, time = 77095 True 1
Fn
System Get Time type = Ticks, time = 77298 True 1
Fn
System Get Time type = Ticks, time = 77626 True 2
Fn
System Get Time type = Ticks, time = 77797 True 1
Fn
System Get Time type = Ticks, time = 78000 True 1
Fn
System Get Time type = Ticks, time = 78109 True 1
Fn
System Get Time type = Ticks, time = 78343 True 1
Fn
System Get Time type = Ticks, time = 78608 True 1
Fn
System Get Time type = Ticks, time = 78718 True 2
Fn
System Get Time type = Ticks, time = 78936 True 1
Fn
System Get Time type = Ticks, time = 79076 True 1
Fn
System Get Time type = Ticks, time = 79201 True 1
Fn
System Get Time type = Ticks, time = 79373 True 1
Fn
System Get Time type = Ticks, time = 79513 True 1
Fn
System Get Time type = Ticks, time = 79685 True 1
Fn
System Get Time type = Ticks, time = 79810 True 2
Fn
System Get Time type = Ticks, time = 79981 True 1
Fn
System Get Time type = Ticks, time = 80184 True 1
Fn
System Sleep duration = -1 (infinite) True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
Thread 0x748
1544 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 1
Fn
File Create filename = C:\Boot\BCD.LOG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, type = size, size_out = 27045 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml, type = size, size_out = 62976 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml, type = size, size_out = 2616 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, type = size, size_out = 27177 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG, type = size, size_out = 169637 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Services\verisign.bmp, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF, type = size, size_out = 2702 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Services\verisign.bmp, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Services\verisign.bmp.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Services\verisign.bmp, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DissolveAnother.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DissolveAnother.png, type = size, size_out = 27935 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DissolveAnother.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DissolveAnother.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DissolveAnother.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png, type = size, size_out = 3286 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png, type = size, size_out = 3316 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png, type = size, size_out = 11861 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png, type = size, size_out = 3304 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground_PAL.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground_PAL.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground_PAL.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground_PAL.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Get Info type = size, size_out = 17248 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl, size = 1048560, size_out = 17248 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL, size = 17264 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL, size = 228 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl, type = size, size_out = 32146 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl, size = 1048560, size_out = 32146 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 32160 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF, type = size, size_out = 7216 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF, size = 1048560, size_out = 7216 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 7232 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, type = size, size_out = 517 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, size = 1048560, size_out = 517 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 528 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, type = size, size_out = 3140 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, size = 1048560, size_out = 3140 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 3152 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF, type = size, size_out = 10607 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF, size = 1048560, size_out = 10607 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 10608 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, type = size, size_out = 6984 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, size = 1048560, size_out = 6984 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 6992 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF, type = size, size_out = 8582 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF, size = 1048560, size_out = 8582 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 8592 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF, type = size, size_out = 4894 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF, size = 1048560, size_out = 4894 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 4896 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF, type = size, size_out = 3120 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF, size = 1048560, size_out = 3120 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 3136 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF, type = size, size_out = 10832 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF, size = 1048560, size_out = 10832 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 10848 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF, type = size, size_out = 7072 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF, size = 1048560, size_out = 7072 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7088 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF, type = size, size_out = 3344 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF, size = 1048560, size_out = 3344 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3360 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF, type = size, size_out = 7968 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF, size = 1048560, size_out = 7968 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7984 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF, type = size, size_out = 3012 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF, size = 1048560, size_out = 3012 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3024 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF, type = size, size_out = 7540 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF, size = 1048560, size_out = 7540 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7552 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF, type = size, size_out = 6632 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF, size = 1048560, size_out = 6632 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 6640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF, type = size, size_out = 3416 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF, size = 1048560, size_out = 3416 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3424 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 4612 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF, size = 1048560, size_out = 4612 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4624 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF, type = size, size_out = 3144 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF, size = 1048560, size_out = 3144 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3152 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID, type = size, size_out = 8492 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF, size = 1048560, size_out = 8492 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 8496 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF, type = size, size_out = 3348 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF, size = 1048560, size_out = 3348 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3360 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF, type = size, size_out = 3228 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF, size = 1048560, size_out = 3228 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3232 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF, type = size, size_out = 4996 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF, size = 1048560, size_out = 4996 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5008 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF, type = size, size_out = 16180 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF, size = 1048560, size_out = 16180 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 16192 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF, type = size, size_out = 24778 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF, size = 1048560, size_out = 24778 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 24784 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF, type = size, size_out = 20554 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF, size = 1048560, size_out = 20554 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 20560 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF, type = size, size_out = 20189 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF, size = 1048560, size_out = 20189 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 20192 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, type = size, size_out = 1464 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, size = 1048560, size_out = 1464 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1472 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF, type = size, size_out = 1516 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF, size = 1048560, size_out = 1516 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1520 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF, type = size, size_out = 9304 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF, size = 1048560, size_out = 9304 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 9312 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF, type = size, size_out = 4024 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF, size = 1048560, size_out = 4024 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4032 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF, type = size, size_out = 1536 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF, size = 1048560, size_out = 1536 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1552 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF, type = size, size_out = 2644 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF, size = 1048560, size_out = 2644 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2656 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF, type = size, size_out = 5272 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF, size = 1048560, size_out = 5272 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5280 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF, type = size, size_out = 27552 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF, size = 1048560, size_out = 27552 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 27568 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF, type = size, size_out = 11500 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF, size = 1048560, size_out = 11500 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 11504 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF, type = size, size_out = 1444 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF, size = 1048560, size_out = 1444 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1456 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF, type = size, size_out = 2166 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF, size = 1048560, size_out = 2166 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2176 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF, type = size, size_out = 12788 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF, size = 1048560, size_out = 12788 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 12800 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF, type = size, size_out = 3524 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF, size = 1048560, size_out = 3524 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3536 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF, type = size, size_out = 3896 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF, size = 1048560, size_out = 3896 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF, size = 3904 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF, type = size, size_out = 3494 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF, size = 1048560, size_out = 3494 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3504 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF, type = size, size_out = 10538 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF, size = 1048560, size_out = 10538 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 10544 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF, type = size, size_out = 2262 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF, size = 1048560, size_out = 2262 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2272 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF, type = size, size_out = 10326 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF, size = 1048560, size_out = 10326 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 10336 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\LINES.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF, type = size, size_out = 2690 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF, size = 1048560, size_out = 2690 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2704 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF, type = size, size_out = 37974 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF, size = 1048560, size_out = 37974 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 37984 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF, type = size, size_out = 7828 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF, size = 1048560, size_out = 7828 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7840 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF, type = size, size_out = 712 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF, size = 1048560, size_out = 712 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 720 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF, type = size, size_out = 1932 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF, size = 1048560, size_out = 1932 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1936 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF, type = size, size_out = 2226 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF, size = 1048560, size_out = 2226 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2240 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF, type = size, size_out = 14820 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF, size = 1048560, size_out = 14820 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 14832 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF, type = size, size_out = 2960 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF, size = 1048560, size_out = 2960 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2976 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\CALEVENT.VRD, type = size, size_out = 2228 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF, size = 1048560, size_out = 2228 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2240 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01162_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01162_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 2300 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF, size = 1048560, size_out = 2300 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2304 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF, type = size, size_out = 2080 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF, size = 1048560, size_out = 2080 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2096 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL, type = size, size_out = 2020 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF, size = 1048560, size_out = 2020 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2032 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF, type = size, size_out = 3796 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF, size = 1048560, size_out = 3796 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3808 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF, type = size, size_out = 2296 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF, size = 1048560, size_out = 2296 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2304 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF, type = size, size_out = 580 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF, size = 1048560, size_out = 580 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 592 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF, type = size, size_out = 296 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF, size = 1048560, size_out = 296 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 304 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion.gta.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 13042 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF, size = 1048560, size_out = 13042 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 13056 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00172_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 13936 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00006_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00006_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00006_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00006_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00006_.WMF, size = 1048560, size_out = 13936 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00006_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 13952 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00006_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00006_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00006_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00006_.WMF, type = size, size_out = 736 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00320_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00320_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00320_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00320_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00320_.WMF, size = 1048560, size_out = 736 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00320_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 752 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00320_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00320_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00320_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00320_.WMF, type = size, size_out = 17308 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00397_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00397_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00397_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00397_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00397_.WMF, size = 1048560, size_out = 17308 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00397_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 17312 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00397_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00397_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00397_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00222_.WMF, type = size, size_out = 11994 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00076_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00076_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00076_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00076_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00076_.WMF, size = 1048560, size_out = 11994 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00076_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 12000 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00076_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00076_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00076_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00242_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 15856 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00296_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00296_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00296_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00296_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00296_.WMF, size = 1048560, size_out = 15856 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00296_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 15872 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00296_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00296_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00296_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00297_.WMF, type = size, size_out = 8552 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00369_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00369_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00369_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00369_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00369_.WMF, size = 1048560, size_out = 8552 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00369_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 8560 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00369_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00369_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00369_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\FLOCH.VRD, type = size, size_out = 11002 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00414_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00414_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00414_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00414_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00414_.WMF, size = 1048560, size_out = 11002 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00414_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 11008 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00414_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00414_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00414_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00414_.WMF, type = size, size_out = 8926 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00455_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00455_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00455_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00455_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00455_.WMF, size = 1048560, size_out = 8926 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00455_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 8928 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00455_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00455_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00455_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00455_.WMF, type = size, size_out = 17406 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00459_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00459_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00459_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00459_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00459_.WMF, size = 1048560, size_out = 17406 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00459_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 17408 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00459_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00459_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00459_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00459_.WMF, type = size, size_out = 5260 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00544_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00544_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00544_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00544_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00544_.WMF, size = 1048560, size_out = 5260 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00544_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5264 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00544_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00544_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00544_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00544_.WMF, type = size, size_out = 11152 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00775_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00775_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00775_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00775_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 11152 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00775_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 11168 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00775_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00775_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 4634 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01074_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01074_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01074_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01074_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01074_.WMF, size = 1048560, size_out = 4634 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01074_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01074_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01074_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01074_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01074_.WMF, type = size, size_out = 2412 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01084_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01084_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01084_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01084_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01084_.WMF, size = 1048560, size_out = 2412 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01084_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2416 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01084_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01084_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01084_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01657_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 31180 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01659_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01659_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01659_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01659_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01659_.WMF, size = 1048560, size_out = 31180 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01659_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 31184 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01659_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01659_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01659_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01659_.WMF, type = size, size_out = 12958 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01660_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01660_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01660_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01660_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01660_.WMF, size = 1048560, size_out = 12958 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01660_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 12960 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01660_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01660_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01660_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01660_.WMF, type = size, size_out = 2488 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02068_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02068_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02068_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02068_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02068_.WMF, size = 1048560, size_out = 2488 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02068_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2496 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02068_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02068_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02068_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 2070 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FLAP.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FLAP.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FLAP.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FLAP.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FLAP.WMF, size = 1048560, size_out = 2070 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FLAP.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2080 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FLAP.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FLAP.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 228 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FLAP.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02116_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 3286 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00236_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00236_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00236_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00236_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00236_.WMF, size = 1048560, size_out = 3286 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00236_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3296 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00236_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00236_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00236_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00236_.WMF, type = size, size_out = 1528 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00334_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00334_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00334_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00334_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00334_.WMF, size = 1048560, size_out = 1528 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00334_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1536 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00334_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00334_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00334_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00334_.WMF, type = size, size_out = 818 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00513_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00513_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00513_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00513_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00513_.WMF, size = 1048560, size_out = 818 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00513_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 832 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00513_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00513_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00513_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00546_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02153_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 3718 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00546_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3728 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02153_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00546_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00546_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02153_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 2756 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01058_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01058_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01058_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01058_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01058_.WMF, size = 1048560, size_out = 2756 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01058_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2768 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01058_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01058_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01058_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01058_.WMF, type = size, size_out = 6016 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01329_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01329_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01329_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01329_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01329_.WMF, size = 1048560, size_out = 6016 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01329_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 6032 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01329_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01329_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01329_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01618_.WMF, type = size, size_out = 5414 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01759_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01759_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01759_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01759_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01759_.WMF, size = 1048560, size_out = 5414 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01759_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5424 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01759_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01759_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01759_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSO.ACL, type = size, size_out = 4970 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02312_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02312_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02312_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02312_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02312_.WMF, size = 1048560, size_out = 4970 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02312_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4976 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02312_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02312_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02312_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02312_.WMF, type = size, size_out = 3082 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02313_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02313_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02313_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
For performance reasons, the remaining 408 entries are omitted.
The remaining entries can be found in glog.xml.
Thread 0x74c
1086 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 1
Fn
File Create filename = C:\Boot\Fonts\jpn_boot.ttf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, type = size, size_out = 1984228 True 1
Fn
File Get Info filename = C:\Boot\Fonts\jpn_boot.ttf, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\Fonts\jpn_boot.ttf.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Boot\Fonts\jpn_boot.ttf, destination_filename = C:\Boot\Fonts\jpn_boot.ttf.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml, type = size, size_out = 8704 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Services\verisign.bmp, type = size, size_out = 451480 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL, type = size, size_out = 502168 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL, type = size, size_out = 385368 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll, type = size, size_out = 5072816 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll, type = size, size_out = 1784192 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF, type = size, size_out = 4297568 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ARFR\MSB1ARFR.ITS, destination_filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ARFR\MSB1ARFR.ITS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\FPSRVUTL.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\FPSRVUTL.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CARBN_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL, size = 1048560, size_out = 9322 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CARBN_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 9328 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CARBN_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CARBN_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID, type = size, size_out = 6165 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID, size = 1048560, size_out = 6165 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID, size = 6176 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID, type = size, size_out = 12981 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID, size = 1048560, size_out = 12981 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 12992 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID, type = size, size_out = 7567 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID, size = 1048560, size_out = 7567 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 7568 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID, type = size, size_out = 6331 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID, size = 1048560, size_out = 6331 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 6336 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID, type = size, size_out = 9797 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID, size = 1048560, size_out = 9797 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 9808 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID, type = size, size_out = 6880 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID, size = 1048560, size_out = 6880 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 6896 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID, type = size, size_out = 6491 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID, size = 1048560, size_out = 6491 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 6496 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID, type = size, size_out = 6070 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID, size = 1048560, size_out = 6070 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 6080 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID, type = size, size_out = 6564 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID, size = 1048560, size_out = 6564 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 6576 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID, type = size, size_out = 6764 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID, size = 1048560, size_out = 6764 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID, size = 6768 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID, type = size, size_out = 6700 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID, size = 1048560, size_out = 6700 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 6704 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 618119 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx, size = 1048560, size_out = 618119 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 618128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx, type = size, size_out = 24611 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx, size = 1048560, size_out = 24611 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 24624 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF, type = size, size_out = 21156 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx, size = 1048560, size_out = 21156 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 21168 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx, type = size, size_out = 211090 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx, size = 1048560, size_out = 211090 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 211104 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx, type = size, size_out = 43357 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx, size = 1048560, size_out = 43357 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 43360 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx, type = size, size_out = 32857 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx, size = 1048560, size_out = 32857 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 32864 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx, type = size, size_out = 43193 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx, size = 1048560, size_out = 43193 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 43200 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx, type = size, size_out = 782121 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx, size = 1048560, size_out = 782121 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 782128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.DLL, type = size, size_out = 15776 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW, type = size, size_out = 394200 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW, size = 1048560, size_out = 394200 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW.id-9C354B42.[bestdecoding@cock.li].best, size = 394208 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\LINES.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\LINES.DLL, type = size, size_out = 15256 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\LINES.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\LINES.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\LINES.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ACCOLKI.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ACCOLKI.DLL, type = size, size_out = 13240 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ACCOLKI.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ACCOLKI.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ACCOLKI.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ACCVDTUI.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ACCVDTUI.DLL, type = size, size_out = 158600 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ACCVDTUI.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ACCVDTUI.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ACCVDTUI.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ACTIP10.HLP, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ACTIP10.HLP, type = size, size_out = 343520 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ACTIP10.HLP, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ACTIP10.HLP.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ACTIP10.HLP, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ACWIZRC.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ACWIZRC.DLL, type = size, size_out = 275856 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ACWIZRC.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ACWIZRC.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ACWIZRC.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL, type = size, size_out = 69496 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL, size = 1048560, size_out = 69496 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 69504 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 226 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DBWIZ.VSL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DBWIZ.VSL, type = size, size_out = 164216 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DBWIZ.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DBWIZ.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DBWIZ.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DBWIZ.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\DBWIZ.VSL, size = 1048560, size_out = 164216 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\DBWIZ.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 164224 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\DBWIZ.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\DBWIZ.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\DBWIZ.VSL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion14.gta, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion14.gta, type = size, size_out = 362441 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion14.gta, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion14.gta.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion14.gta, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion14.gta.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion14.gta, size = 1048560, size_out = 362441 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion14.gta.id-9C354B42.[bestdecoding@cock.li].best, size = 362448 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion14.gta, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion14.gta.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion14.gta True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DWGCNV.VSL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DWGCNV.VSL, type = size, size_out = 38752 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DWGCNV.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DWGCNV.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DWGCNV.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DWGCNV.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\DWGCNV.VSL, size = 1048560, size_out = 38752 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\DWGCNV.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 38768 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\DWGCNV.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\DWGCNV.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\DWGCNV.VSL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DWGDPRES.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV.HXS, type = size, size_out = 16224 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DWGDPRES.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DWGDPRES.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DWGDPRES.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXT, type = size, size_out = 209 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXT, size = 1048560, size_out = 209 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXT True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_F_COL.HXK, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_F_COL.HXK, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_F_COL.HXK True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_K_COL.HXK, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_K_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_K_COL.HXK True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.HXS, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.HXS, type = size, size_out = 7827686 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.HXS, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.HXS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXC, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXC, type = size, size_out = 621 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXC, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXC, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXC, size = 1048560, size_out = 621 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 624 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXC, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXC True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXC, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXC, type = size, size_out = 621 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXC, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXC, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXC, size = 1048560, size_out = 621 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 624 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXC, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXC True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.REST.IDX_DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 100224 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.REST.IDX_DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.REST.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.REST.IDX_DLL, size = 1048560, size_out = 100224 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 100240 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.REST.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 254 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.REST.IDX_DLL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDIFF.VRD, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDIFF.VRD, type = size, size_out = 1919 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDIFF.VRD, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDIFF.VRD.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDIFF.VRD, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDIFF.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDIFF.VRD, size = 1048560, size_out = 1919 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDIFF.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 1920 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDIFF.VRD, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDIFF.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDIFF.VRD True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDUCT.VRD, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDUCT.VRD, type = size, size_out = 1309 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDUCT.VRD, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDUCT.VRD.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDUCT.VRD, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDUCT.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDUCT.VRD, size = 1048560, size_out = 1309 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDUCT.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 1312 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDUCT.VRD, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDUCT.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\HVACDUCT.VRD True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXC, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXC, type = size, size_out = 666 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXC, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXC, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXC, size = 1048560, size_out = 666 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 672 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXC, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 256 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXC True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXC, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXC, type = size, size_out = 636 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXC, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXC, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXC, size = 1048560, size_out = 636 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXC, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXC True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INSTLIST.VRD, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INSTLIST.VRD, type = size, size_out = 1899 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INSTLIST.VRD, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INSTLIST.VRD.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INSTLIST.VRD, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INSTLIST.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INSTLIST.VRD, size = 1048560, size_out = 1899 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INSTLIST.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 1904 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INSTLIST.VRD, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INSTLIST.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\INSTLIST.VRD True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MAPIR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MAPIR.DLL, type = size, size_out = 1124720 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MAPIR.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MAPIR.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MAPIR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MAPIR.DLL.IDX_DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01291_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 108416 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MAPIR.DLL.IDX_DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MAPIR.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MAPIR.DLL.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MAPIR.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MAPIR.DLL.IDX_DLL, size = 1048560, size_out = 108416 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MAPIR.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 108432 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MAPIR.DLL.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MAPIR.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MAPIR.DLL.IDX_DLL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC.HXS, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC.HXS, type = size, size_out = 431456 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC.HXS, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC.HXS.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC.HXS, size = 1048560, size_out = 431456 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 431472 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC.HXS, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC.HXS True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXT, type = size, size_out = 205 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXT, size = 1048560, size_out = 205 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 208 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXT True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_F_COL.HXK, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_F_COL.HXK, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_F_COL.HXK True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_K_COL.HXK, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_K_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_K_COL.HXK True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSTINTL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSTINTL.DLL, type = size, size_out = 89432 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSTINTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSTINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSTINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXT, type = size, size_out = 206 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXT, size = 1048560, size_out = 206 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 208 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXT True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_F_COL.HXK, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_F_COL.HXK, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_F_COL.HXK True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_K_COL.HXK, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_K_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00957_.WMF, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00957_.WMF, size = 244 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_K_COL.HXK True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK2.VRD, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK2.VRD, type = size, size_out = 2150 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK2.VRD, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK2.VRD.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK2.VRD, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK2.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK2.VRD, size = 1048560, size_out = 2150 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK2.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 2160 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK2.VRD, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK2.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK2.VRD True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00956_.WMF, type = size, size_out = 611 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXC, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXC, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXC, size = 1048560, size_out = 611 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 624 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXC, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXC True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXC, type = size, size_out = 203 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXT, size = 1048560, size_out = 203 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 208 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXT True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_COL.HXT, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_F_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_K_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_K_COL.HXK, type = size, size_out = 401792 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OMSINTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OMSINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OMSINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OMSINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_K_COL.HXK, size = 1048560, size_out = 24960 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OMSINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 24976 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OMSINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\OMSINTL.DLL.IDX_DLL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OIS_K_COL.HXK, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_F_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_K_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_K_COL.HXK, type = size, size_out = 3415952 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ONINTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ONINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\ONINTL.DLL, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\ONINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ONINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_K_COL.HXK, size = 1048560, size_out = 15232 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ONINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 15248 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ONINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 248 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\ONINTL.DLL.IDX_DLL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_K_COL.HXK, type = size, size_out = 114560 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ONINTL.REST.IDX_DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ONINTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ONINTL.REST.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ONINTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ONINTL.REST.IDX_DLL, size = 1048560, size_out = 114560 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ONINTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 114576 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ONINTL.REST.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ONINTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\ONINTL.REST.IDX_DLL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ONINTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 66992 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ORGWIZ.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ORGWIZ.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ORGWIZ.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ORGWIZ.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ORGWIZ.VSL, size = 1048560, size_out = 66992 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ORGWIZ.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 67008 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ORGWIZ.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ORGWIZ.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\ORGWIZ.VSL True 1
Fn
File Get Info type = size, size_out = 207 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_COL.HXT, size = 1048560, size_out = 207 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 208 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_COL.HXT True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090781.WMF, type = size, size_out = 84352 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\PE.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\PE.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\PE.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\PE.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\PE.VSL, size = 1048560, size_out = 84352 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\PE.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 84368 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\PE.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\PE.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\PE.VSL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\PIPELINE.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read size = 1048560, size_out = 1920 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\PIPELINE.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 1936 True 1
Fn
Data
File Read size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\PIPELINE.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\PIPELINE.VRD True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099158.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 6982504 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.DLL, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\PUBWZINT.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099164.WMF, size = 1048560, size_out = 173952 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\PUBWZINT.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 173968 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099164.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\PUBWZINT.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 254 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\PUBWZINT.REST.IDX_DLL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099165.JPG, type = size, size_out = 83808 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\QRYINT32.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\QRYINT32.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\QRYINT32.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG.HXS.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099165.JPG, size = 1048560, size_out = 397828 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 397840 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099165.JPG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG.HXS True 1
Fn
File Get Info type = size, size_out = 320928 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SOCIALCONNECTORRES.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SOCIALCONNECTORRES.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\SOCIALCONNECTORRES.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\TIMESOLN.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099168.JPG.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 281448 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\TIMESOLN.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 281456 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099168.JPG.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\TIMESOLN.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\TIMESOLN.VSL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_F_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_K_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_K_COL.HXK, type = size, size_out = 68488 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISWEB.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISWEB.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISWEB.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISWEB.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISWEB.VSL, size = 1048560, size_out = 68488 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISWEB.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 68496 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISWEB.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISWEB.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISWEB.VSL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISWEB.VSL, type = size, size_out = 153 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\Vsdir\Visfilem.vsdir, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\Vsdir\Visfilem.vsdir.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\Vsdir\Visfilem.vsdir, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\Vsdir\Visfilem.vsdir.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\Vsdir\Visfilem.vsdir, size = 1048560, size_out = 153 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\Vsdir\Visfilem.vsdir.id-9C354B42.[bestdecoding@cock.li].best, size = 160 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\Vsdir\Visfilem.vsdir, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\Vsdir\Visfilem.vsdir.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\Vsdir\Visfilem.vsdir True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WDALLLNK.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISUTILS.VSL, size = 1048560, size_out = 1940 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WDALLLNK.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 1952 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISUTILS.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WDALLLNK.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WDALLLNK.VRD True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISUTILS.VSL, type = size, size_out = 211 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_COL.HXT, size = 1048560, size_out = 211 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_COL.HXT True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 254 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 207 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_COL.HXT, size = 1048560, size_out = 207 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 208 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_COL.HXT True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_COL.HXT, type = size, size_out = 7438482 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV.HXS, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV.HXS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_COL.HXT, size = 1048560, size_out = 651 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 656 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXC True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_COL.HXT, type = size, size_out = 207 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_COL.HXT, size = 1048560, size_out = 207 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 208 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_COL.HXT True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_COL.HXT, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_F_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_K_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_K_COL.HXK, type = size, size_out = 42336 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WORKFLOW.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WORKFLOW.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WORKFLOW.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WORKFLOW.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WORKFLOW.VSL, size = 1048560, size_out = 42336 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WORKFLOW.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 42352 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WORKFLOW.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WORKFLOW.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WORKFLOW.VSL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101866.BMP, type = size, size_out = 16776 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\wxpr.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\wxpr.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\wxpr.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\XFUNC.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101866.BMP, size = 1048560, size_out = 52624 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\XFUNC.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 52640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101866.BMP, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\XFUNC.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\XFUNC.VSL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL, type = size, size_out = 2362752 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.DLL, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL, size = 1048560, size_out = 99200 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 99216 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 252 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.DLL.IDX_DLL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL, type = size, size_out = 37760 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\XLLEX.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\XLLEX.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\XLLEX.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\XLSLICER.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL, size = 1048560, size_out = 12672 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\XLSLICER.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 12688 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\XLSLICER.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 252 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\XLSLICER.DLL.IDX_DLL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1036\MSO.ACL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL, size = 1048560, size_out = 43558 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1036\MSO.ACL.id-9C354B42.[bestdecoding@cock.li].best, size = 43568 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1036\MSO.ACL.id-9C354B42.[bestdecoding@cock.li].best, size = 226 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1036\MSO.ACL True 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\ACCWIZ\ACWZUSR12.ACCDU, destination_filename = C:\Program Files\Microsoft Office\Office14\ACCWIZ\ACWZUSR12.ACCDU.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\ADDINS\MSSPC.ECF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1036\MSO.ACL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 778 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\ADDINS\MSSPC.ECF.id-9C354B42.[bestdecoding@cock.li].best, size = 784 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1036\MSO.ACL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\ADDINS\MSSPC.ECF.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\ADDINS\MSSPC.ECF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\ADDINS\PMAILEXT.ECF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1036\MSO.ACL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 626 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\ADDINS\PMAILEXT.ECF.id-9C354B42.[bestdecoding@cock.li].best, size = 640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1036\MSO.ACL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\ADDINS\PMAILEXT.ECF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\ADDINS\PMAILEXT.ECF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART11.BDR.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01759_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 30920 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART11.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 30928 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01759_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART11.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART11.BDR True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART2.BDR.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01759_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 47188 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART2.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 47200 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01759_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART2.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART2.BDR True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART8.BDR.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01759_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 49098 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART8.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 49104 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01759_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART8.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART8.BDR True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CharSetTable.chr.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105360.WMF, size = 1048560, size_out = 56514 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CharSetTable.chr.id-9C354B42.[bestdecoding@cock.li].best, size = 56528 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105360.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CharSetTable.chr.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CharSetTable.chr True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLAPPTR.FAE.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105360.WMF, size = 1048560, size_out = 11704 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLAPPTR.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 11712 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105360.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLAPPTR.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLAPPTR.FAE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\DESKSAM.SAM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105360.WMF, size = 1048560, size_out = 23424 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\DESKSAM.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 23440 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105360.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\DESKSAM.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\DESKSAM.SAM True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLAPPT.FAE.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105974.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 122280 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLAPPT.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 122288 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105974.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLAPPT.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLAPPT.FAE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OL.SAM.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 63384 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLMAIL.FAE, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLMAIL.FAE.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLMAIL.FAE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLMAIL.FAE.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLMAIL.FAE, size = 1048560, size_out = 63384 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLMAIL.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 63392 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLMAIL.FAE, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLMAIL.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLMAIL.FAE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\PAB.SAM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLMAIL.FAE, size = 1048560, size_out = 63864 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\PAB.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 63872 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLMAIL.FAE, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\PAB.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 226 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\PAB.SAM True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\Custom.propdesc.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLMAIL.FAE, size = 1048560, size_out = 1343 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\Custom.propdesc.id-9C354B42.[bestdecoding@cock.li].best, size = 1344 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107132.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\Custom.propdesc.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\Custom.propdesc True 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\DRILLDWN.DLL, destination_filename = C:\Program Files\Microsoft Office\Office14\DRILLDWN.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\EMSMDB32.DLL, destination_filename = C:\Program Files\Microsoft Office\Office14\EMSMDB32.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\ENGLISH.LNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107042.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 311852 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\ENGLISH.LNG.id-9C354B42.[bestdecoding@cock.li].best, size = 311856 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107042.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\ENGLISH.LNG.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\ENGLISH.LNG True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\APPTS.ICO.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107042.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 2998 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\APPTS.ICO.id-9C354B42.[bestdecoding@cock.li].best, size = 3008 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107042.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\APPTS.ICO.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\APPTS.ICO True 1
Fn
Thread 0x750
1740 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 1
Fn
File Create filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, type = size, size_out = 129 True 1
Fn
File Get Info filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, type = file_attributes True 1
Fn
File Get Info filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, type = size, size_out = 791686 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml, type = size, size_out = 33280 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, type = size, size_out = 2514 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml, type = size, size_out = 2578 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml, type = size, size_out = 3024 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml, type = size, size_out = 2658 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml, type = size, size_out = 2628 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 28974 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 28976 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl, type = size, size_out = 34076 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl, size = 1048560, size_out = 34076 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 34080 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF, type = size, size_out = 9024 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF, size = 1048560, size_out = 9024 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 9040 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, type = size, size_out = 11891 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, size = 1048560, size_out = 11891 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 11904 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, type = size, size_out = 502 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, size = 1048560, size_out = 502 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 512 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, type = size, size_out = 12702 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, size = 1048560, size_out = 12702 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 12704 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, type = size, size_out = 3484 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, size = 1048560, size_out = 3484 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 3488 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF, type = size, size_out = 12482 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF, size = 1048560, size_out = 12482 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 12496 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF, type = size, size_out = 15308 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF, size = 1048560, size_out = 15308 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 15312 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF, type = size, size_out = 5030 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF, size = 1048560, size_out = 5030 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 5040 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF, type = size, size_out = 1146 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF, size = 1048560, size_out = 1146 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1152 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, type = size, size_out = 5375 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, size = 1048560, size_out = 5375 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 5376 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF, type = size, size_out = 3026 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF, size = 1048560, size_out = 3026 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3040 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, type = size, size_out = 4734 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, size = 1048560, size_out = 4734 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4736 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID, type = size, size_out = 5684 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 5684 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5696 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF, type = size, size_out = 14428 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF, size = 1048560, size_out = 14428 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 14432 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF, type = size, size_out = 1832 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF, size = 1048560, size_out = 1832 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1840 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID, type = size, size_out = 27858 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF, size = 1048560, size_out = 27858 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 27872 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, type = size, size_out = 2108 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, size = 1048560, size_out = 2108 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2112 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF, type = size, size_out = 2344 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF, size = 1048560, size_out = 2344 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2352 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF, type = size, size_out = 7804 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF, size = 1048560, size_out = 7804 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7808 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF, type = size, size_out = 2016 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF, size = 1048560, size_out = 2016 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2032 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF, type = size, size_out = 2492 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF, size = 1048560, size_out = 2492 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2496 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, type = size, size_out = 4870 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, size = 1048560, size_out = 4870 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4880 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF, type = size, size_out = 22516 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF, size = 1048560, size_out = 22516 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 22528 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF, type = size, size_out = 17236 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF, size = 1048560, size_out = 17236 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 17248 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF, type = size, size_out = 16112 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF, size = 1048560, size_out = 16112 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 16128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF, type = size, size_out = 16676 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF, size = 1048560, size_out = 16676 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 16688 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF, type = size, size_out = 47996 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF, size = 1048560, size_out = 47996 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 48000 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF, type = size, size_out = 7966 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF, size = 1048560, size_out = 7966 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7968 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF, type = size, size_out = 20454 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF, size = 1048560, size_out = 20454 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 20464 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF, type = size, size_out = 12982 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF, size = 1048560, size_out = 12982 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 12992 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx, type = size, size_out = 14486 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF, size = 1048560, size_out = 14486 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 14496 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF, type = size, size_out = 18304 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF, size = 1048560, size_out = 18304 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 18320 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF, type = size, size_out = 11058 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF, size = 1048560, size_out = 11058 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 11072 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF, type = size, size_out = 12520 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF, size = 1048560, size_out = 12520 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 12528 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF, type = size, size_out = 8070 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF, size = 1048560, size_out = 8070 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 8080 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF, type = size, size_out = 1736 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF, size = 1048560, size_out = 1736 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1744 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, type = size, size_out = 3780 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, size = 1048560, size_out = 3780 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3792 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF, type = size, size_out = 812 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF, size = 1048560, size_out = 812 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 816 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx, type = size, size_out = 13102 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx, size = 1048560, size_out = 13102 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 13104 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF, type = size, size_out = 6256 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF, size = 1048560, size_out = 6256 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 6272 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF, type = size, size_out = 3768 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF, size = 1048560, size_out = 3768 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3776 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF, type = size, size_out = 3350 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF, size = 1048560, size_out = 3350 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3360 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 228 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF, type = size, size_out = 7974 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF, size = 1048560, size_out = 7974 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7984 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF, type = size, size_out = 1712 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF, size = 1048560, size_out = 1712 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1728 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF, type = size, size_out = 1588 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF, size = 1048560, size_out = 1588 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1600 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF, type = size, size_out = 1212 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF, size = 1048560, size_out = 1212 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1216 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF, type = size, size_out = 2052 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF, size = 1048560, size_out = 2052 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2064 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF, type = size, size_out = 2488 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF, size = 1048560, size_out = 2488 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2496 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF, type = size, size_out = 7176 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF, size = 1048560, size_out = 7176 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7184 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF, type = size, size_out = 2422 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF, size = 1048560, size_out = 2422 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2432 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF, type = size, size_out = 2262 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF, size = 1048560, size_out = 2262 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2272 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 228 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF, type = size, size_out = 5270 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF, size = 1048560, size_out = 5270 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5280 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF, type = size, size_out = 29628 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF, size = 1048560, size_out = 29628 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 29632 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\AECUTILS.VSL, type = size, size_out = 2832 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF, size = 1048560, size_out = 2832 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2848 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF, size = 1048560, size_out = 17584 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 17600 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF, type = size, size_out = 42992 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF, size = 1048560, size_out = 42992 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 43008 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01143_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 2140 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01143_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2144 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01143_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01143_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF, type = size, size_out = 2796 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF, size = 1048560, size_out = 2796 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2800 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\CALEVENT.VRD, type = size, size_out = 3588 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF, size = 1048560, size_out = 3588 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3600 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01172_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL, size = 1048560, size_out = 2232 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion.gta, size = 2240 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion.gta, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01172_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01182_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\DBENGR.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 2996 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01182_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3008 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\DBENGR.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01182_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01182_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DBENGR.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 8564 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF, size = 1048560, size_out = 8564 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 8576 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF, type = size, size_out = 2524 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF, size = 1048560, size_out = 2524 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2528 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF, type = size, size_out = 2324 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF, size = 1048560, size_out = 2324 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2336 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 3252 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3264 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 6958 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00184_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00184_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00184_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00184_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00184_.WMF, size = 1048560, size_out = 6958 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00184_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 6960 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00184_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00184_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00184_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00184_.WMF, type = size, size_out = 6938 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00202_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00202_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00202_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00202_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00202_.WMF, size = 1048560, size_out = 6938 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00202_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 6944 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00202_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00202_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00202_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00202_.WMF, type = size, size_out = 12356 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00222_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00222_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00222_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00222_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00222_.WMF, size = 1048560, size_out = 12356 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00222_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 12368 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00222_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00222_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00222_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00397_.WMF, type = size, size_out = 7944 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00902_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00902_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00902_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00902_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00902_.WMF, size = 1048560, size_out = 7944 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00902_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7952 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00902_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00902_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00902_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00902_.WMF, type = size, size_out = 29212 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00086_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00086_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00086_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00086_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00086_.WMF, size = 1048560, size_out = 29212 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00086_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 29216 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00086_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00086_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00086_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00242_.WMF, type = size, size_out = 14194 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00090_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00090_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00090_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00090_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00090_.WMF, size = 1048560, size_out = 14194 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00090_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 14208 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00090_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00090_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00090_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00077_.WMF, type = size, size_out = 18194 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00297_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00297_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00297_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00297_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00297_.WMF, size = 1048560, size_out = 18194 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00297_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 18208 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00297_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00297_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00297_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01772_.WMF, type = size, size_out = 10816 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00397_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00397_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00397_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00397_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00397_.WMF, size = 1048560, size_out = 10816 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00397_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 10832 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00397_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00397_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00397_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00419_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\FLOCH.VRD, size = 1048560, size_out = 16396 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00419_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 16400 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\FLOCH.VRD, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00419_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00419_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\FLOCH.VRD, type = size, size_out = 2108 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00435_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00435_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00435_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00435_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00435_.WMF, size = 1048560, size_out = 2108 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VSL, size = 2112 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00435_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VSL, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00435_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GR8GALRY.GRA, type = size, size_out = 13968 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00799_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00799_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00799_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00799_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00799_.WMF, size = 1048560, size_out = 13968 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00799_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 13984 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00799_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00799_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00799_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXC, type = size, size_out = 15164 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00965_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00965_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00965_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00965_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00965_.WMF, size = 1048560, size_out = 15164 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00965_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 15168 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00965_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00965_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00965_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00965_.WMF, type = size, size_out = 3964 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01191_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01191_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01191_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01191_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01191_.WMF, size = 1048560, size_out = 3964 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01191_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3968 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01191_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01191_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01191_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01191_.WMF, type = size, size_out = 2332 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01196_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01196_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01196_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01196_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01196_.WMF, size = 1048560, size_out = 2332 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01196_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2336 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01196_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01196_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01196_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01196_.WMF, type = size, size_out = 10316 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01548_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01548_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01548_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01548_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01548_.WMF, size = 1048560, size_out = 10316 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01548_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 10320 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01548_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01548_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01548_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01548_.WMF, type = size, size_out = 17924 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01658_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01658_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01658_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01658_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01658_.WMF, size = 1048560, size_out = 17924 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXT, size = 17936 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01658_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXT, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01658_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01658_.WMF, type = size, size_out = 3696 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02088_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02088_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02088_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02088_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02088_.WMF, size = 1048560, size_out = 3696 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02088_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3712 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02088_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02088_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02088_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02088_.WMF, type = size, size_out = 1564 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02097_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02097_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02097_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02097_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02097_.WMF, size = 1048560, size_out = 1564 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02097_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1568 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02097_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02097_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02097_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02097_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 4660 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02115_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02115_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02115_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02115_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02115_.WMF, size = 1048560, size_out = 4660 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02115_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4672 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02115_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02115_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02115_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02115_.WMF, type = size, size_out = 3988 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02116_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02116_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02116_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02116_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02116_.WMF, size = 1048560, size_out = 3988 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02116_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4000 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02116_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02116_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02116_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02116_.WMF, type = size, size_out = 5392 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02153_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02153_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02153_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02153_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02153_.WMF, size = 1048560, size_out = 5392 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02153_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5408 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02153_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02153_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02153_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00241_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 2472 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00084_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00084_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00084_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00084_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00084_.WMF, size = 1048560, size_out = 2472 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00084_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2480 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00084_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00084_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00084_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00084_.WMF, type = size, size_out = 3016 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00276_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00276_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00276_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00276_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00276_.WMF, size = 1048560, size_out = 3016 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00276_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3024 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00276_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00276_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00276_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00276_.WMF, type = size, size_out = 14688 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00524_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00524_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00524_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00524_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00524_.WMF, size = 1048560, size_out = 14688 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00524_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 14704 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00524_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00524_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00524_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MAPISHELLR.DLL, type = size, size_out = 5798 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00527_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00527_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00527_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00527_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00527_.WMF, size = 1048560, size_out = 5798 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00527_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5808 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00527_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00527_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00527_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00527_.WMF, type = size, size_out = 10644 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, size = 1048560, size_out = 10644 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 10656 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, type = size, size_out = 2116 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00625_.WMF, type = file_attributes True 1
Fn
For performance reasons, the remaining 580 entries are omitted.
The remaining entries can be found in glog.xml.
Thread 0x754
999 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 1
Fn
File Create filename = C:\Boot\BCD, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\BCD.LOG1, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\BCD.LOG1, type = size, size_out = 0 True 1
Fn
File Create filename = C:\Boot\BCD.LOG2, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\BCD.LOG2, type = size, size_out = 0 True 1
Fn
File Create filename = C:\Boot\cs-CZ\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\cs-CZ\bootmgr.exe.mui, type = size, size_out = 89168 True 1
Fn
File Get Info filename = C:\Boot\cs-CZ\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\cs-CZ\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\cs-CZ\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\da-DK\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\da-DK\bootmgr.exe.mui, type = size, size_out = 87616 True 1
Fn
File Get Info filename = C:\Boot\da-DK\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\da-DK\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\da-DK\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\de-DE\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\de-DE\bootmgr.exe.mui, type = size, size_out = 91712 True 1
Fn
File Get Info filename = C:\Boot\de-DE\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\de-DE\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\de-DE\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\el-GR\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\el-GR\bootmgr.exe.mui, type = size, size_out = 94800 True 1
Fn
File Get Info filename = C:\Boot\el-GR\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\el-GR\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\el-GR\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Move source_filename = C:\Boot\Fonts\chs_boot.ttf, destination_filename = C:\Boot\Fonts\chs_boot.ttf.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Boot\Fonts\cht_boot.ttf, destination_filename = C:\Boot\Fonts\cht_boot.ttf.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PRJRES.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PRJRES.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 14872 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID, size = 14880 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID, type = size, size_out = 10562 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF, size = 1048560, size_out = 10562 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 10576 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID, type = size, size_out = 7178 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID, size = 1048560, size_out = 7178 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 7184 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 5968 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID, size = 1048560, size_out = 5968 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 5984 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID, type = size, size_out = 6763 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID, size = 1048560, size_out = 6763 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 6768 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID, type = size, size_out = 8538 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID, size = 1048560, size_out = 8538 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 8544 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID, type = size, size_out = 7768 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID, size = 1048560, size_out = 7768 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 7776 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID, type = size, size_out = 5983 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID, size = 1048560, size_out = 5983 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 5984 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 5058 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF, size = 1048560, size_out = 5058 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID, size = 5072 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID, type = size, size_out = 13358 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID, size = 1048560, size_out = 13358 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 13360 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF, type = size, size_out = 218310 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx, size = 1048560, size_out = 218310 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF, size = 218320 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF, type = size, size_out = 22417 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx, size = 1048560, size_out = 22417 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 22432 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Couture.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF, type = size, size_out = 1967905 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Couture.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Couture.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Couture.eftx, destination_filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Couture.eftx.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx, type = size, size_out = 314017 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx, size = 1048560, size_out = 314017 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 314032 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx, type = size, size_out = 16350 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx, size = 1048560, size_out = 16350 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 16352 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx, type = size, size_out = 39546 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx, size = 1048560, size_out = 39546 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 39552 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx, type = size, size_out = 582401 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx, size = 1048560, size_out = 582401 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF, size = 582416 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx, type = size, size_out = 27789 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx, size = 1048560, size_out = 27789 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 27792 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx, type = size, size_out = 41295 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx, size = 1048560, size_out = 41295 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 41296 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx, type = size, size_out = 19611 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx, size = 1048560, size_out = 19611 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 19616 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx, type = size, size_out = 31224 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx, size = 1048560, size_out = 31224 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 31232 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML, type = size, size_out = 312376 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML, size = 1048560, size_out = 312376 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML.id-9C354B42.[bestdecoding@cock.li].best, size = 312384 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\AECUTILS.VSL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\AECUTILS.VSL, type = size, size_out = 41864 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\AECUTILS.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\AECUTILS.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\AECUTILS.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\AECUTILS.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\AECUTILS.VSL, size = 1048560, size_out = 41864 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 41872 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\AECUTILS.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\AECUTILS.VSL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ContactPickerIntl.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF, type = size, size_out = 16256 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ContactPickerIntl.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ContactPickerIntl.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ContactPickerIntl.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DBENGR.VSL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DBENGR.VSL, type = size, size_out = 53144 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DBENGR.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DBENGR.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DBENGR.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DBENGR.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\DBENGR.VSL, size = 1048560, size_out = 53144 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\DBENGR.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 53152 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\DBENGR.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\DBENGR.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\DBENGR.VSL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EntityPickerIntl.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EntityPickerIntl.dll, type = size, size_out = 24456 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EntityPickerIntl.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EntityPickerIntl.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EntityPickerIntl.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ENVELOPR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ENVELOPR.DLL, type = size, size_out = 17288 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ENVELOPR.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ENVELOPR.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ENVELOPR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EQPLIST.VRD, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EQPLIST.VRD, type = size, size_out = 1699 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EQPLIST.VRD, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EQPLIST.VRD.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EQPLIST.VRD, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EQPLIST.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\EQPLIST.VRD, size = 1048560, size_out = 1699 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\EQPLIST.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 1712 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\EQPLIST.VRD, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\EQPLIST.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\EQPLIST.VRD True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\FLOCH.VRD, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\FLOCH.VRD, type = size, size_out = 2028 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\FLOCH.VRD, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\FLOCH.VRD.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\FLOCH.VRD, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\FLOCH.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\FLOCH.VRD, size = 1048560, size_out = 2028 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\FLOCH.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 2032 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\FLOCH.VRD, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\FLOCH.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\FLOCH.VRD True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VSL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VSL, type = size, size_out = 320880 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VSL, size = 1048560, size_out = 320880 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 320896 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH.HXS, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VSL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXT, type = size, size_out = 205 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXT, size = 1048560, size_out = 205 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 208 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXT True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_K_COL.HXK, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_K_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_K_COL.HXK True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.DLL, type = size, size_out = 208256 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRLEX.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRLEX.DLL, type = size, size_out = 12672 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRLEX.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRLEX.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRLEX.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE.HXS, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE.HXS, type = size, size_out = 2278416 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE.HXS, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE.HXS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll, type = size, size_out = 8794976 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXC, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXC, type = size, size_out = 626 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXC, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXC, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXC, size = 1048560, size_out = 626 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXC, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXC True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH.HXS, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH.HXS, type = size, size_out = 1527046 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH.HXS, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH.HXS.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH.HXS, size = 1048560, size_out = 1048560 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH.HXS, size = 1048560, size_out = 478486 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 478496 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH.HXS, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH.HXS True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INVENTRY.VRD, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INVENTRY.VRD, type = size, size_out = 818 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INVENTRY.VRD, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INVENTRY.VRD.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INVENTRY.VRD, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INVENTRY.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INVENTRY.VRD, size = 1048560, size_out = 818 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INVENTRY.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 832 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MAPIR.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INVENTRY.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\INVENTRY.VRD True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MAPISHELLR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MAPISHELLR.DLL, type = size, size_out = 591832 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MAPISHELLR.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MAPISHELLR.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MAPISHELLR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MERES.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MERES.DLL, type = size, size_out = 1052592 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MERES.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MERES.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MERES.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.HXS, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.HXS, type = size, size_out = 3877906 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.HXS, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.HXS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXC, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXC, type = size, size_out = 636 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXC, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXC, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXC, size = 1048560, size_out = 636 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXC, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXC True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXC, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXC, type = size, size_out = 621 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXC, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXC, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXC, size = 1048560, size_out = 621 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 624 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXC, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXC True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV.HXS, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV.HXS, type = size, size_out = 4750792 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV.HXS, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV.HXS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXC, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXC, type = size, size_out = 641 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXC, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXC, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXC, size = 1048560, size_out = 641 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 656 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXC, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXC True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXC, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXC, type = size, size_out = 621 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXC, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXC, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXC, size = 1048560, size_out = 621 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 624 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXC, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXC True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXC, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXC, type = size, size_out = 626 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXC, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXC, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXC, size = 1048560, size_out = 626 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXC, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXC True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK3.VRD, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK3.VRD, type = size, size_out = 3246 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK3.VRD, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK3.VRD.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK3.VRD, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK3.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK3.VRD, size = 1048560, size_out = 3246 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK3.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 3248 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK3.VRD, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK3.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK3.VRD True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OFFOWCI.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OFFOWCI.DLL, type = size, size_out = 529280 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OFFOWCI.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OFFOWCI.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OFFOWCI.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OIS.HXS, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OIS.HXS, type = size, size_out = 457988 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OIS.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OIS.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OIS.HXS, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OIS.HXS.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OIS.HXS, size = 1048560, size_out = 457988 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OIS.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 458000 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OIS.HXS, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OIS.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 226 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\OIS.HXS True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ospintl.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ospintl.dll, type = size, size_out = 18320 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ospintl.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ospintl.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ospintl.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLBAR.INF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLBAR.INF, type = size, size_out = 2416 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLBAR.INF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLBAR.INF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLBAR.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.DLL, type = size, size_out = 6573424 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.DLL, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.DLL.IDX_DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.DLL.IDX_DLL, type = size, size_out = 119680 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.DLL.IDX_DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.DLL.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.DLL.IDX_DLL, size = 1048560, size_out = 119680 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 119696 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090781.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 252 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.DLL.IDX_DLL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXT, type = size, size_out = 211 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXT, size = 1048560, size_out = 211 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXT True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXT, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 254 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090390.WMF, type = size, size_out = 5000295 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.HXS, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.HXS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090390.WMF, size = 1048560, size_out = 631 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090390.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_COL.HXC True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090390.WMF, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_F_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_K_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_K_COL.HXK, type = size, size_out = 128864 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLWVW.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLWVW.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLWVW.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLWVW.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_K_COL.HXK, size = 1048560, size_out = 11136 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLWVW.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 11152 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLWVW.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLWVW.DLL.IDX_DLL True 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV.HXS, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV.HXS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090089.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 656 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 672 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090089.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 252 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXC True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090089.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 212 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXT, size = 1048560, size_out = 212 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 252 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXT True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXT, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 256 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_F_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 256 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_K_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_K_COL.HXK, type = size, size_out = 6816061 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.HXS, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.HXS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_K_COL.HXK, size = 1048560, size_out = 636 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_COL.HXC True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT.DEV_K_COL.HXK, type = size, size_out = 208 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_COL.HXT, size = 1048560, size_out = 208 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_COL.HXT True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_COL.HXT, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099158.WMF, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099158.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 248 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099162.JPG.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 28160 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\PUBCOLOR.SCM, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\PUBCOLOR.SCM.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\PUBCOLOR.SCM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\PUBCOLOR.SCM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\PUBCOLOR.SCM, size = 1048560, size_out = 28160 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\PUBCOLOR.SCM.id-9C354B42.[bestdecoding@cock.li].best, size = 28176 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\PUBCOLOR.SCM, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\PUBCOLOR.SCM.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\PUBCOLOR.SCM True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\SAVASWEB.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_F_COL.HXK, size = 1048560, size_out = 48488 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\SAVASWEB.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 48496 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\SAVASWEB.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\SAVASWEB.VSL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_F_COL.HXK, type = size, size_out = 9088 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SLINTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SLINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\SLINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\SMIGRATE.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\SAVASWEB.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 38768 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\SMIGRATE.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 38784 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\SAVASWEB.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\SMIGRATE.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\SMIGRATE.VSL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\SPACE.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 1604 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\SPACE.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 1616 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\SPACE.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\SPACE.VRD True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 392584 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\UML.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\UML.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\UML.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\UML.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\UML.VSL, size = 1048560, size_out = 392584 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\UML.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 392592 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\UML.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\UML.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 226 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\UML.VSL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099163.WMF, type = size, size_out = 37264 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISBRRES.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISBRRES.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISBRRES.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV.HXS, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV.HXS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 641 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 656 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_COL.HXC True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 879814 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET.HXS, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET.HXS.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET.HXS, size = 1048560, size_out = 879814 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 879824 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 252 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET.HXS True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 216 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_COL.HXT, size = 1048560, size_out = 216 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 260 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_COL.HXT True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_COL.HXT, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 264 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_F_COL.HXK, type = size, size_out = 205 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXT, size = 1048560, size_out = 205 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 208 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXT True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXT, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_F_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_K_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099168.JPG.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 4932186 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV.HXS, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV.HXS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099168.JPG.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 651 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 656 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099168.JPG.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_COL.HXC True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_COL.HXT, size = 1048560, size_out = 631 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_COL.HXC True 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\ACCVDT.DLL, destination_filename = C:\Program Files\Microsoft Office\Office14\ACCVDT.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\ACCWIZ\ACWZDAT12.ACCDU, destination_filename = C:\Program Files\Microsoft Office\Office14\ACCWIZ\ACWZDAT12.ACCDU.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\ADDINS\FAXEXT.ECF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read size = 1048560, size_out = 830 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\ADDINS\MSSPC.ECF.id-9C354B42.[bestdecoding@cock.li].best, size = 832 True 1
Fn
Data
File Read size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\ADDINS\MSSPC.ECF.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\ADDINS\FAXEXT.ECF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\ADDINS\OUTEX2.ECF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read size = 1048560, size_out = 850 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\ADDINS\OUTEX2.ECF.id-9C354B42.[bestdecoding@cock.li].best, size = 864 True 1
Fn
Data
File Read size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\ADDINS\OUTEX2.ECF.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\ADDINS\OUTEX2.ECF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\BCSEvents.man.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read size = 1048560, size_out = 36177 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\BCSEvents.man.id-9C354B42.[bestdecoding@cock.li].best, size = 36192 True 1
Fn
Data
File Read size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\BCSEvents.man.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\BCSEvents.man True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART1.BDR.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read size = 1048560, size_out = 32246 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART1.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 32256 True 1
Fn
Data
File Read size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART1.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART1.BDR True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART10.BDR.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read size = 1048560, size_out = 9292 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART10.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 9296 True 1
Fn
Data
File Read size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART10.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART10.BDR True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART14.BDR.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\ADDINS\OUTEX.ECF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 51388 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART14.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 51392 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\ADDINS\OUTEX.ECF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART14.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART14.BDR True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART4.BDR.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\ADDINS\OUTEX.ECF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 14594 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART4.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 14608 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\ADDINS\OUTEX.ECF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART4.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART4.BDR True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART5.BDR.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\ADDINS\OUTEX.ECF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 15788 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART5.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 15792 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\ADDINS\OUTEX.ECF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART5.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART5.BDR True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART7.BDR.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\ADDINS\OUTEX.ECF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 3876 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART7.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 3888 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\ADDINS\OUTEX.ECF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART7.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART7.BDR True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\ODBCR.SAM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, size = 1048560, size_out = 11664 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\ODBCR.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 11680 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\ODBCR.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\ODBCR.SAM True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLMAILR.FAE.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, size = 1048560, size_out = 10160 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLMAILR.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 10176 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLMAILR.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLMAILR.FAE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLR.SAM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, size = 1048560, size_out = 15760 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLR.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 15776 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLR.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 226 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLR.SAM True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\DELIMWIN.FAE.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 31136 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\DELIMWIN.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 31152 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\DELIMWIN.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\DELIMWIN.FAE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLADD.FAE.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\CONVERT\DELIMWIN.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 133024 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLADD.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 133040 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\CONVERT\DELIMWIN.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLADD.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLADD.FAE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLNOTE.FAE.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105530.WMF, size = 1048560, size_out = 52120 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLNOTE.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 52128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105530.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLNOTE.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLNOTE.FAE True 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\EXCEL.EXE, destination_filename = C:\Program Files\Microsoft Office\Office14\EXCEL.EXE.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\excel.exe.manifest.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\CONVERT\DESKSAM.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 1196 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\excel.exe.manifest.id-9C354B42.[bestdecoding@cock.li].best, size = 1200 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\CONVERT\DESKSAM.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\excel.exe.manifest.id-9C354B42.[bestdecoding@cock.li].best, size = 248 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\excel.exe.manifest True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\ACTIVITY.CFG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105530.WMF, size = 1048560, size_out = 968 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\ACTIVITY.CFG.id-9C354B42.[bestdecoding@cock.li].best, size = 976 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105530.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\ACTIVITY.CFG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\ACTIVITY.CFG True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\CNFNOT.CFG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105530.WMF, size = 1048560, size_out = 320 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\CNFNOT.CFG.id-9C354B42.[bestdecoding@cock.li].best, size = 336 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105530.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\CNFNOT.CFG.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\CNFNOT.CFG True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\CNFNOT.ICO.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105530.WMF, size = 1048560, size_out = 1078 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\CNFNOT.ICO.id-9C354B42.[bestdecoding@cock.li].best, size = 1088 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105530.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\CNFNOT.ICO.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\CNFNOT.ICO True 1
Fn
Thread 0x758
1596 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 2
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 89600 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, type = size, size_out = 197120 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, type = size, size_out = 224256 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, type = size, size_out = 222208 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi, type = size, size_out = 194048 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 1600388 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, type = size, size_out = 1434 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\desktop.ini.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG, size = 1048560, size_out = 174 True 1
Fn
Data
File Write filename = C:\Program Files\desktop.ini.id-9C354B42.[bestdecoding@cock.li].best, size = 176 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\desktop.ini.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\desktop.ini True 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png, type = size, size_out = 5088 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\redmenu.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\redmenu.png, type = size, size_out = 3108 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\redmenu.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\redmenu.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\redmenu.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop.wmv, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop.wmv, type = size, size_out = 533292 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop.wmv, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop.wmv.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop_PAL.wmv, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop_PAL.wmv, type = size, size_out = 613292 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop_PAL.wmv, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop_PAL.wmv.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonIcon.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\vistabg.png, type = size, size_out = 153 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonIcon.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonIcon.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonIcon.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_plain_Thumbnail.bmp, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_plain_Thumbnail.bmp, type = size, size_out = 5072 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_plain_Thumbnail.bmp, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_plain_Thumbnail.bmp.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_plain_Thumbnail.bmp, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read size = 1048560, size_out = 30948 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 30960 True 1
Fn
Data
File Read size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF, type = size, size_out = 14873 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF, size = 1048560, size_out = 14873 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll, size = 14880 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF, type = size, size_out = 3251 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF, size = 1048560, size_out = 3251 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 3264 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF, type = size, size_out = 2596 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF, size = 1048560, size_out = 2596 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 2608 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF, type = size, size_out = 5315 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF, size = 1048560, size_out = 5315 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 5328 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF, type = size, size_out = 9248 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF, size = 1048560, size_out = 9248 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 9264 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF, type = size, size_out = 5016 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF, size = 1048560, size_out = 5016 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 5024 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF, type = size, size_out = 4390 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF, size = 1048560, size_out = 4390 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 4400 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF, type = size, size_out = 3966 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF, size = 1048560, size_out = 3966 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 3968 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF, type = size, size_out = 20578 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, size = 1048560, size_out = 20578 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 20592 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, type = size, size_out = 1596 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, size = 1048560, size_out = 1596 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1600 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF, type = size, size_out = 26332 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF, size = 1048560, size_out = 26332 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 26336 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF, type = size, size_out = 5836 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF, size = 1048560, size_out = 5836 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5840 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF, type = size, size_out = 2756 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF, size = 1048560, size_out = 2756 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2768 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF, type = size, size_out = 2636 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF, size = 1048560, size_out = 2636 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF, type = size, size_out = 6636 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF, size = 1048560, size_out = 6636 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 6640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF, type = size, size_out = 7804 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF, size = 1048560, size_out = 7804 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7808 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF, type = size, size_out = 4808 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF, size = 1048560, size_out = 4808 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4816 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF, type = size, size_out = 26886 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF, size = 1048560, size_out = 26886 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 26896 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF, type = size, size_out = 28948 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF, size = 1048560, size_out = 28948 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 28960 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF, type = size, size_out = 26748 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF, size = 1048560, size_out = 26748 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 26752 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF, type = size, size_out = 4066 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF, size = 1048560, size_out = 4066 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4080 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 24320 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF, size = 1048560, size_out = 24320 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 24336 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF, type = size, size_out = 40206 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF, size = 1048560, size_out = 40206 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 40208 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF, type = size, size_out = 47786 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF, size = 1048560, size_out = 47786 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 47792 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF, type = size, size_out = 9710 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF, size = 1048560, size_out = 9710 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 9712 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF, type = size, size_out = 9818 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF, size = 1048560, size_out = 9818 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 9824 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF, type = size, size_out = 7862 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF, size = 1048560, size_out = 7862 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7872 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF, type = size, size_out = 10146 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF, size = 1048560, size_out = 10146 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 10160 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF, type = size, size_out = 1696 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF, size = 1048560, size_out = 1696 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1712 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF, type = size, size_out = 3986 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF, size = 1048560, size_out = 3986 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4000 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF, type = size, size_out = 4708 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF, size = 1048560, size_out = 4708 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4720 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF, type = size, size_out = 2556 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF, size = 1048560, size_out = 2556 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2560 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF, type = size, size_out = 4164 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF, size = 1048560, size_out = 4164 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4176 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF, type = size, size_out = 27050 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF, size = 1048560, size_out = 27050 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 27056 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF, type = size, size_out = 6996 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF, size = 1048560, size_out = 6996 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7008 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF, type = size, size_out = 9590 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF, size = 1048560, size_out = 9590 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 9600 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF, type = size, size_out = 19476 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF, size = 1048560, size_out = 19476 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 19488 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF, type = size, size_out = 29004 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF, size = 1048560, size_out = 29004 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 29008 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF, type = size, size_out = 1044 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF, size = 1048560, size_out = 1044 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1056 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF, type = size, size_out = 8366 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF, size = 1048560, size_out = 8366 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 8368 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF, type = size, size_out = 4976 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF, size = 1048560, size_out = 4976 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4992 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF, type = size, size_out = 5580 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF, size = 1048560, size_out = 5580 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5584 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF, type = size, size_out = 1676 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF, size = 1048560, size_out = 1676 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1680 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF, type = size, size_out = 2732 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF, size = 1048560, size_out = 2732 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2736 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF, type = size, size_out = 1874 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF, size = 1048560, size_out = 1874 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1888 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF, type = size, size_out = 3948 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF, size = 1048560, size_out = 3948 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3952 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF, type = size, size_out = 3564 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF, size = 1048560, size_out = 3564 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3568 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF, type = size, size_out = 2966 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF, size = 1048560, size_out = 2966 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2976 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 226 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CUP.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF, type = size, size_out = 31122 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF, size = 1048560, size_out = 31122 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 31136 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF, size = 1048560, size_out = 8256 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 8272 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 40030 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF, size = 1048560, size_out = 40030 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 40032 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC, type = size, size_out = 42908 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF, size = 1048560, size_out = 42908 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 42912 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF, type = size, size_out = 9992 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF, size = 1048560, size_out = 9992 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 10000 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF, type = size, size_out = 24588 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF, size = 1048560, size_out = 24588 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 24592 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF, type = size, size_out = 3692 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF, size = 1048560, size_out = 3692 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3696 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF, type = size, size_out = 3632 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF, size = 1048560, size_out = 3632 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3648 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF, type = size, size_out = 3616 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF, size = 1048560, size_out = 3616 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3632 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01162_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 2300 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF, size = 2304 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01162_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF, type = size, size_out = 2004 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF, size = 1048560, size_out = 2004 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2016 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\AEC.VSL, type = size, size_out = 2404 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF, size = 1048560, size_out = 2404 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2416 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 1804 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF, size = 1048560, size_out = 1804 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1808 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF, type = size, size_out = 1888 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF, size = 1048560, size_out = 1888 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1904 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF, type = size, size_out = 1448 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF, size = 1048560, size_out = 1448 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1456 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF, type = size, size_out = 1768 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01366_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01366_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01366_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01366_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01366_.WMF, size = 1048560, size_out = 1768 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF, size = 1776 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01366_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01366_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01366_.WMF, type = size, size_out = 19068 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF, size = 1048560, size_out = 19068 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 19072 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF, type = size, size_out = 4148 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF, size = 1048560, size_out = 4148 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4160 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 2300 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01772_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01772_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01772_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01772_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01772_.WMF, size = 1048560, size_out = 2300 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01772_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2304 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01772_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01772_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01772_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00074_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 6780 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00242_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00242_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00242_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00242_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00242_.WMF, size = 1048560, size_out = 6780 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00242_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 6784 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00242_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00242_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00242_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DWGCNV.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 37390 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00096_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00096_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00096_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00096_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00096_.WMF, size = 1048560, size_out = 37390 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00096_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 37392 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00096_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00096_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00096_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00306_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00077_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 46814 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00306_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 46816 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00077_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00306_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00306_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00077_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 4074 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00361_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00361_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00361_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00361_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00361_.WMF, size = 1048560, size_out = 4074 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00361_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4080 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00361_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00361_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00361_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00369_.WMF, type = size, size_out = 42704 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00814_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00814_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00814_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00814_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00814_.WMF, size = 1048560, size_out = 42704 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00814_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 42720 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00814_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00814_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00814_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00814_.WMF, type = size, size_out = 4984 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01176_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01176_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01176_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01176_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01176_.WMF, size = 1048560, size_out = 4984 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01176_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4992 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01176_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01176_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01176_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01176_.WMF, type = size, size_out = 1160 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01193_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01193_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01193_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01193_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01193_.WMF, size = 1048560, size_out = 1160 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01193_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1168 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01196_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01193_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01193_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF, type = size, size_out = 30414 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01657_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01657_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01657_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01657_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01657_.WMF, size = 1048560, size_out = 30414 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01657_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 30416 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01657_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01657_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01657_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01657_.WMF, type = size, size_out = 2636 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02141_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02141_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02141_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02141_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02141_.WMF, size = 1048560, size_out = 2636 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02141_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02141_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02141_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02141_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02141_.WMF, type = size, size_out = 1648 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02158_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02158_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02158_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02158_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02158_.WMF, size = 1048560, size_out = 1648 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02158_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1664 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02158_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02158_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02158_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02158_.WMF, type = size, size_out = 3128 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02161_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02161_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02161_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02161_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02161_.WMF, size = 1048560, size_out = 3128 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02161_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3136 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02161_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02161_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02161_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INSTLIST.VRD, type = size, size_out = 2232 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00231_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00231_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00231_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00231_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00231_.WMF, size = 1048560, size_out = 2232 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00231_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2240 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00231_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00231_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00231_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00231_.WMF, type = size, size_out = 1468 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00601_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00601_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00601_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00601_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00601_.WMF, size = 1048560, size_out = 1468 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00601_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1472 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00601_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00601_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00601_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00601_.WMF, type = size, size_out = 1400 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00602_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00602_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00602_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00602_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00602_.WMF, size = 1048560, size_out = 1400 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00602_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1408 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00602_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00602_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00602_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXC, type = size, size_out = 11490 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00669_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00669_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00669_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00669_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00669_.WMF, size = 1048560, size_out = 11490 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00669_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 11504 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00669_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00669_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00669_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00669_.WMF, type = size, size_out = 7084 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00688_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00688_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00688_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00688_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00688_.WMF, size = 1048560, size_out = 7084 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00688_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7088 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00688_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00688_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00688_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00688_.WMF, type = size, size_out = 7098 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00693_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00693_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00693_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00693_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00693_.WMF, size = 1048560, size_out = 7098 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXC, size = 7104 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00693_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXC, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00693_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 7296 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01618_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01618_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01618_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01618_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01618_.WMF, size = 1048560, size_out = 7296 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01618_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7312 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01618_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01618_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01618_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01618_.WMF, type = size, size_out = 26706 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01923_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01923_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01923_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01923_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01923_.WMF, size = 1048560, size_out = 26706 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01923_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 26720 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01923_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01923_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01923_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01923_.WMF, type = size, size_out = 7932 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02282_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02282_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02282_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02282_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02282_.WMF, size = 1048560, size_out = 7932 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02282_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7936 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02282_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02282_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02282_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02166_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 5552 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02298_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02298_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02298_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02298_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02298_.WMF, size = 1048560, size_out = 5552 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02298_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5568 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02298_.WMF, size = 1048560, size_out = 0 True 1
Fn
For performance reasons, the remaining 452 entries are omitted.
The remaining entries can be found in glog.xml.
Thread 0x75c
1065 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 1
Fn
File Create filename = C:\Boot\Fonts\kor_boot.ttf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\Fonts\wgl4_boot.ttf, type = size, size_out = 2371360 True 1
Fn
File Get Info filename = C:\Boot\Fonts\kor_boot.ttf, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\Fonts\kor_boot.ttf.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Boot\Fonts\kor_boot.ttf, destination_filename = C:\Boot\Fonts\kor_boot.ttf.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Boot\fr-FR\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\fr-FR\bootmgr.exe.mui, type = size, size_out = 93248 True 1
Fn
File Get Info filename = C:\Boot\fr-FR\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\fr-FR\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\fr-FR\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\hu-HU\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\hu-HU\bootmgr.exe.mui, type = size, size_out = 90688 True 1
Fn
File Get Info filename = C:\Boot\hu-HU\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\hu-HU\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\hu-HU\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\it-IT\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\it-IT\bootmgr.exe.mui, type = size, size_out = 90704 True 1
Fn
File Get Info filename = C:\Boot\it-IT\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\it-IT\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\it-IT\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\ja-JP\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\ja-JP\bootmgr.exe.mui, type = size, size_out = 76352 True 1
Fn
File Get Info filename = C:\Boot\ja-JP\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\ja-JP\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\ja-JP\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\ko-KR\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\ko-KR\bootmgr.exe.mui, type = size, size_out = 75344 True 1
Fn
File Get Info filename = C:\Boot\ko-KR\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\ko-KR\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\ko-KR\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\memtest.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\memtest.exe, type = size, size_out = 485760 True 1
Fn
File Get Info filename = C:\Boot\memtest.exe, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\memtest.exe.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\memtest.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1AR.LEX, destination_filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1AR.LEX.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BABY_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 7384 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BABY_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 7392 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BABY_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BABY_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID, type = size, size_out = 6970 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID, size = 1048560, size_out = 6970 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 6976 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 9318 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID, size = 1048560, size_out = 9318 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 9328 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID, type = size, size_out = 5843 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID, size = 1048560, size_out = 5843 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 5856 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID, type = size, size_out = 5440 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID, size = 1048560, size_out = 5440 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 5456 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID, type = size, size_out = 5714 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID, size = 1048560, size_out = 5714 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 5728 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID, type = size, size_out = 10122 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID, size = 1048560, size_out = 10122 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 10128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID, type = size, size_out = 6392 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID, size = 1048560, size_out = 6392 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 6400 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID, type = size, size_out = 4219 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID, size = 1048560, size_out = 4219 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 4224 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID, type = size, size_out = 6915 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID, size = 1048560, size_out = 6915 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 6928 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 27365 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx, size = 1048560, size_out = 27365 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 27376 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx, type = size, size_out = 22554 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx, size = 1048560, size_out = 22554 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 22560 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF, type = size, size_out = 26989 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx, size = 1048560, size_out = 26989 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 26992 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF, type = size, size_out = 26648 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx, size = 1048560, size_out = 26648 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 26656 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx, type = size, size_out = 18639 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx, size = 1048560, size_out = 18639 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 18640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx, type = size, size_out = 24117 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx, size = 1048560, size_out = 24117 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 24128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx, type = size, size_out = 228746 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx, size = 1048560, size_out = 228746 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 228752 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF, type = size, size_out = 21423 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx, size = 1048560, size_out = 21423 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 21424 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 27781 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx, size = 1048560, size_out = 27781 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 27792 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\AUTOSHAP.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\AUTOSHAP.DLL, type = size, size_out = 15776 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\AUTOSHAP.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\AUTOSHAP.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\AUTOSHAP.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BULLETS.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BULLETS.DLL, type = size, size_out = 15264 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BULLETS.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BULLETS.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BULLETS.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ACCDDSUI.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ACCDDSUI.DLL, type = size, size_out = 21424 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ACCDDSUI.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ACCDDSUI.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ACCDDSUI.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC, type = size, size_out = 495616 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC, size = 1048560, size_out = 495616 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 495632 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\ACCESS12.ACC True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ASSET.VRD, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ASSET.VRD, type = size, size_out = 1694 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ASSET.VRD, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ASSET.VRD.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ASSET.VRD, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ASSET.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ASSET.VRD, size = 1048560, size_out = 1694 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ASSET.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 1696 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ASSET.VRD, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ASSET.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\ASSET.VRD True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\CALEVENT.VRD, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\CALEVENT.VRD, type = size, size_out = 2144 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\CALEVENT.VRD, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\CALEVENT.VRD.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\CALEVENT.VRD, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\CALEVENT.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\CALEVENT.VRD, size = 1048560, size_out = 2144 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\CALEVENT.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 2160 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\CALEVENT.VRD, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\CALEVENT.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\CALEVENT.VRD True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DataServices\FOLDER.ICO, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DataServices\FOLDER.ICO, type = size, size_out = 4710 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DataServices\FOLDER.ICO, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DataServices\FOLDER.ICO.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DataServices\FOLDER.ICO, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DataServices\FOLDER.ICO.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\DataServices\FOLDER.ICO, size = 1048560, size_out = 4710 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF, size = 4720 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\DataServices\FOLDER.ICO, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\DataServices\FOLDER.ICO True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion.gta, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion.gta, type = size, size_out = 104836 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion.gta, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion.gta.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion.gta, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion.gta.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion.gta, size = 1048560, size_out = 104836 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion.gta.id-9C354B42.[bestdecoding@cock.li].best, size = 104848 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion.gta, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion.gta.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\Discussion.gta True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EAWFINTL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00077_.WMF, type = size, size_out = 51600 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EAWFINTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EAWFINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EAWFINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ENVELOPR.DLL.IDX_DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ENVELOPR.DLL.IDX_DLL, type = size, size_out = 13696 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ENVELOPR.DLL.IDX_DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ENVELOPR.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ENVELOPR.DLL.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ENVELOPR.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ENVELOPR.DLL.IDX_DLL, size = 1048560, size_out = 13696 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ENVELOPR.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 13712 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ENVELOPR.DLL.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ENVELOPR.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 252 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\ENVELOPR.DLL.IDX_DLL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXT, type = size, size_out = 205 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXT, size = 1048560, size_out = 205 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 208 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXT True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_F_COL.HXK, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_F_COL.HXK, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_F_COL.HXK True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_K_COL.HXK, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_K_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL_K_COL.HXK True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXPTOOWS.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXPTOOWS.DLL, type = size, size_out = 12160 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXPTOOWS.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXPTOOWS.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXPTOOWS.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\FACILITY.VSL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\FACILITY.VSL, type = size, size_out = 81768 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\FACILITY.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\FACILITY.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\FACILITY.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\FACILITY.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\FACILITY.VSL, size = 1048560, size_out = 81768 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\FACILITY.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 81776 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\FACILITY.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\FACILITY.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\FACILITY.VSL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH.HXS, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_COL.HXC, type = size, size_out = 610086 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH.HXS, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH.HXS.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH.HXS, size = 1048560, size_out = 610086 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 610096 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH.HXS, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH.HXS True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_K_COL.HXK, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_K_COL.HXK, type = size, size_out = 110 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_K_COL.HXK, size = 1048560, size_out = 110 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 112 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_K_COL.HXK True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\HVAC.VSL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\HVAC.VSL, type = size, size_out = 36200 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\HVAC.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\HVAC.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\HVAC.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\HVAC.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\HVAC.VSL, size = 1048560, size_out = 36200 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\HVAC.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 36208 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\HVAC.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\HVAC.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 228 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\HVAC.VSL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXT, type = size, size_out = 214 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXT, size = 1048560, size_out = 214 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 256 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXT True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_K_COL.HXK, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_K_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00241_.WMF, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00241_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 260 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_K_COL.HXK True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\IPDSINTL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\IPDSINTL.DLL, type = size, size_out = 2270608 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\IPDSINTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\IPDSINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\IPDSINTL.DLL, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\IPDSINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\IPEDINTL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\IPEDINTL.DLL, type = size, size_out = 883600 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\IPEDINTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\IPEDINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\IPEDINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\IPOLKINTL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\IPOLKINTL.DLL, type = size, size_out = 255920 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\IPOLKINTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\IPOLKINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\IPOLKINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\Issue Tracking.gta, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\Issue Tracking.gta, type = size, size_out = 249535 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\Issue Tracking.gta, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\Issue Tracking.gta.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\Issue Tracking.gta, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\Issue Tracking.gta.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\Issue Tracking.gta, size = 1048560, size_out = 249535 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\Issue Tracking.gta.id-9C354B42.[bestdecoding@cock.li].best, size = 249536 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\Issue Tracking.gta, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\Issue Tracking.gta.id-9C354B42.[bestdecoding@cock.li].best, size = 248 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\Issue Tracking.gta True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MOR6INT.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MOR6INT.DLL, type = size, size_out = 446312 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MOR6INT.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MOR6INT.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MOR6INT.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MOR6INT.REST.IDX_DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MOR6INT.REST.IDX_DLL, type = size, size_out = 39808 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MOR6INT.REST.IDX_DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MOR6INT.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MOR6INT.REST.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MOR6INT.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MOR6INT.REST.IDX_DLL, size = 1048560, size_out = 39808 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MOR6INT.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 39824 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MOR6INT.REST.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MOR6INT.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 252 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MOR6INT.REST.IDX_DLL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MPXRES.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MPXRES.DLL, type = size, size_out = 12664 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MPXRES.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MPXRES.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MPXRES.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV.HXS, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV.HXS, type = size, size_out = 10745972 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV.HXS, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV.HXS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXC, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXC, type = size, size_out = 656 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXC, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXC, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXC, size = 1048560, size_out = 656 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 672 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXC, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 252 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXC True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXT, type = size, size_out = 212 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXT, size = 1048560, size_out = 212 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 252 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXT True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_F_COL.HXK, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_F_COL.HXK, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 256 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_F_COL.HXK True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXT, type = size, size_out = 208 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXT, size = 1048560, size_out = 208 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_COL.HXT True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_F_COL.HXK, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_F_COL.HXK, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 248 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_F_COL.HXK True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_K_COL.HXK, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_K_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 248 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS_K_COL.HXK True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSAIN.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSAIN.DLL, type = size, size_out = 1212288 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSAIN.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSAIN.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSAIN.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSO.ACL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSO.ACL, type = size, size_out = 37762 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSO.ACL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSO.ACL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSO.ACL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSO.ACL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSO.ACL, size = 1048560, size_out = 37762 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSO.ACL.id-9C354B42.[bestdecoding@cock.li].best, size = 37776 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSO.ACL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSO.ACL.id-9C354B42.[bestdecoding@cock.li].best, size = 226 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSO.ACL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXT, type = size, size_out = 205 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXT, size = 1048560, size_out = 205 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 208 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXT True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_COL.HXT, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_F_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_K_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02298_.WMF, type = size, size_out = 1886518 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.HXS, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.HXS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.OPG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02298_.WMF, size = 1048560, size_out = 12024 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.OPG.id-9C354B42.[bestdecoding@cock.li].best, size = 12032 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02298_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.OPG.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.OPG True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00426_.WMF, type = size, size_out = 1844 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK1.VRD, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK1.VRD.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK1.VRD, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK1.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK1.VRD, size = 1048560, size_out = 1844 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK1.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 1856 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK1.VRD, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK1.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\NETWORK1.VRD True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00557_.WMF, type = size, size_out = 129432 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OISINTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OISINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OISINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE.HXS, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE.HXS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00557_.WMF, size = 1048560, size_out = 631 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00557_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_COL.HXC True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00557_.WMF, type = size, size_out = 207 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_COL.HXT, size = 1048560, size_out = 207 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 208 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_COL.HXT True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ORGCH.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_COL.HXT, size = 1048560, size_out = 1608 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ORGCH.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 1616 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ORGCH.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\ORGCH.VRD True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OIS.HXS, type = size, size_out = 57248 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ORGCHART.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ORGCHART.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ORGCHART.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ORGCHART.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ORGCHART.VSL, size = 1048560, size_out = 57248 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ORGCHART.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 57264 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ORGCHART.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ORGCHART.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\ORGCHART.VSL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ORGCHART.VSL, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 254 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_K_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_K_COL.HXK, type = size, size_out = 1287548 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.HOL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.HOL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.HOL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.HOL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.HOL, size = 1048560, size_out = 1048560 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.HOL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.HOL, size = 1048560, size_out = 238988 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.HOL.id-9C354B42.[bestdecoding@cock.li].best, size = 238992 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.HOL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.HOL.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.HOL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0093905.WMF, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 248 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_K_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_K_COL.HXK, type = size, size_out = 1284456 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\PPINTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\PPINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\PPINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\PPINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_K_COL.HXK, size = 1048560, size_out = 38272 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\PPINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 38288 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\PPINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 248 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\PPINTL.DLL.IDX_DLL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_K_COL.HXK, type = size, size_out = 139648 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\PPINTL.REST.IDX_DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\PPINTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\PPINTL.REST.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\PPINTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\PPINTL.REST.IDX_DLL, size = 1048560, size_out = 139648 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\PPINTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 139664 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\PPINTL.REST.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\PPINTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\PPINTL.REST.IDX_DLL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099154.JPG.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 67968 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.DLL.IDX_DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.DLL.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.DLL.IDX_DLL, size = 1048560, size_out = 67968 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 67984 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.DLL.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 252 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.DLL.IDX_DLL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099158.WMF, type = size, size_out = 269184 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.REST.IDX_DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.REST.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.REST.IDX_DLL, size = 1048560, size_out = 269184 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 269200 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.REST.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 254 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.REST.IDX_DLL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\PUBCOLOR.SCM, type = size, size_out = 631 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXC, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXC, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXC, size = 1048560, size_out = 631 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXC, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXC True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099166.JPG, type = size, size_out = 68984 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SGRES.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SGRES.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\SGRES.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\SGRES.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099166.JPG, size = 1048560, size_out = 11648 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\SGRES.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 11664 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099166.JPG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\SGRES.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\SGRES.DLL.IDX_DLL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099166.JPG, type = size, size_out = 42352 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SHAPNUM.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SHAPNUM.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\SHAPNUM.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\SHAPNUM.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\SMIGRATE.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 42352 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\UML.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 42368 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\SMIGRATE.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\UML.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\SHAPNUM.VSL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SMIGRATE.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 61312 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\UmOutlookStrings.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\UmOutlookStrings.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\UmOutlookStrings.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VALVE.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read size = 1048560, size_out = 1868 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VALVE.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 1872 True 1
Fn
Data
File Read size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VALVE.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VALVE.VRD True 1
Fn
File Get Info type = size, size_out = 240000 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISINTL.DLL.IDX_DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISINTL.DLL.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISINTL.DLL.IDX_DLL, size = 1048560, size_out = 240000 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 240016 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISINTL.DLL.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISINTL.DLL.IDX_DLL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISINTL.DLL.IDX_DLL, type = size, size_out = 209 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_COL.HXT, size = 1048560, size_out = 209 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_COL.HXT True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_COL.HXT, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_F_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_K_COL.HXK True 1
Fn
File Get Info type = size, size_out = 2839338 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.HXS, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.HXS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read size = 1048560, size_out = 676 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 688 True 1
Fn
Data
File Read size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 260 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_COL.HXC True 1
Fn
File Get Info type = size, size_out = 2287488 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM.HXS, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM.HXS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read size = 1048560, size_out = 641 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 656 True 1
Fn
Data
File Read size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_COL.HXC True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 2520158 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD.HXS, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD.HXS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 641 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 656 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_COL.HXC True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 50544 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISUTILS.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISUTILS.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISUTILS.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISUTILS.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISUTILS.VSL, size = 1048560, size_out = 50544 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISUTILS.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 50560 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISUTILS.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISUTILS.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISUTILS.VSL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WDERRLNK.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101862.BMP, size = 1048560, size_out = 1826 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WDERRLNK.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 1840 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101862.BMP, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WDERRLNK.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WDERRLNK.VRD True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099168.JPG.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 1475590 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, size = 1048560, size_out = 1048560 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, size = 1048560, size_out = 427030 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 427040 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS True 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\AUDIOSEARCHMAIN.DLL, destination_filename = C:\Program Files\Microsoft Office\Office14\AUDIOSEARCHMAIN.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\AUDIOSEARCHSAPIFE.DLL, destination_filename = C:\Program Files\Microsoft Office\Office14\AUDIOSEARCHSAPIFE.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\BCSClientManifest.man.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read size = 1048560, size_out = 26758 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\BCSClientManifest.man.id-9C354B42.[bestdecoding@cock.li].best, size = 26768 True 1
Fn
Data
File Read size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\BCSClientManifest.man.id-9C354B42.[bestdecoding@cock.li].best, size = 254 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\BCSClientManifest.man True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART12.BDR.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, size = 1048560, size_out = 58756 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART12.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 58768 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART12.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART12.BDR True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART15.BDR.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, size = 1048560, size_out = 27412 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART15.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 27424 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART15.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART15.BDR True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART6.BDR.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, size = 1048560, size_out = 55222 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART6.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 55232 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART6.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART6.BDR True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART9.BDR.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, size = 1048560, size_out = 50838 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART9.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 50848 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART9.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART9.BDR True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\DELIMR.FAE.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 10144 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\DELIMR.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 10160 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\DELIMR.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\DELIMR.FAE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLJRNLR.FAE.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 10160 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLJRNLR.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 10176 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLJRNLR.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLJRNLR.FAE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLTASKR.FAE.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 10672 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLTASKR.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 10688 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLTASKR.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLTASKR.FAE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\PABR.SAM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 11144 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\PABR.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 11152 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\PABR.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 228 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\PABR.SAM True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\DELIMDOS.FAE.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 31120 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\DELIMDOS.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 31136 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\DELIMDOS.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\DELIMDOS.FAE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLTASK.FAE.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH.HXS, size = 1048560, size_out = 115608 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLTASK.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 115616 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH.HXS, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLTASK.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLTASK.FAE True 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\DWGDP.DLL, destination_filename = C:\Program Files\Microsoft Office\Office14\DWGDP.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\excelcnv.exe, destination_filename = C:\Program Files\Microsoft Office\Office14\excelcnv.exe.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\ACTIVITS.ICO.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105328.WMF, size = 1048560, size_out = 2998 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\ACTIVITS.ICO.id-9C354B42.[bestdecoding@cock.li].best, size = 3008 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105328.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\ACTIVITS.ICO.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\ACTIVITS.ICO True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\APPT.CFG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105328.WMF, size = 1048560, size_out = 789 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\APPT.CFG.id-9C354B42.[bestdecoding@cock.li].best, size = 800 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105328.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\APPT.CFG.id-9C354B42.[bestdecoding@cock.li].best, size = 228 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\APPT.CFG True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\APPTL.ICO.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105328.WMF, size = 1048560, size_out = 1078 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\APPTL.ICO.id-9C354B42.[bestdecoding@cock.li].best, size = 1088 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105328.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\APPTL.ICO.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\APPTL.ICO True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\CNFRES.CFG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\ERXIMP.ADD.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 338 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\CNFRES.CFG.id-9C354B42.[bestdecoding@cock.li].best, size = 352 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\ERXIMP.ADD.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\CNFRES.CFG.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\CNFRES.CFG True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\CONTACT.CFG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\ERXIMP.ADD.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 783 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\CONTACT.CFG.id-9C354B42.[bestdecoding@cock.li].best, size = 784 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\ERXIMP.ADD.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\CONTACT.CFG.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\FORMS\1033\CONTACT.CFG True 1
Fn
Thread 0x760
1496 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 2
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL, type = size, size_out = 31744 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, type = size, size_out = 2556 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF, type = size, size_out = 21812 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png, type = size, size_out = 10123 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\redmenu.png, type = size, size_out = 6431 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv, type = size, size_out = 1741316 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv, type = size, size_out = 1901316 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_notes.wmv, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_notes.wmv, type = size, size_out = 709220 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_notes.wmv, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_notes.wmv.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_notes.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\vistabg.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\vistabg.png, type = size, size_out = 195804 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\vistabg.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\vistabg.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\vistabg.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_babypink_Thumbnail.bmp, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_babypink_Thumbnail.bmp, type = size, size_out = 5072 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_babypink_Thumbnail.bmp, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_babypink_Thumbnail.bmp.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_babypink_Thumbnail.bmp, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Get Info type = size, size_out = 18738 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, size = 1048560, size_out = 18738 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 18752 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 228 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl, type = size, size_out = 39515 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl, size = 1048560, size_out = 39515 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 39520 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF, type = size, size_out = 29790 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl, size = 1048560, size_out = 29790 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 29792 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF, type = size, size_out = 6684 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF, size = 1048560, size_out = 6684 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.INF, size = 6688 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.INF, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF, type = size, size_out = 8097 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF, size = 1048560, size_out = 8097 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 8112 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF, type = size, size_out = 7686 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF, size = 1048560, size_out = 7686 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 7696 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF, type = size, size_out = 5253 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF, size = 1048560, size_out = 5253 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 5264 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF, type = size, size_out = 4955 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF, size = 1048560, size_out = 4955 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 4960 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF, type = size, size_out = 7583 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF, size = 1048560, size_out = 7583 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, size = 7584 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, type = size, size_out = 13254 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, size = 1048560, size_out = 13254 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 13264 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF, type = size, size_out = 3378 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF, size = 1048560, size_out = 3378 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 3392 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID, type = size, size_out = 3746 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF, size = 1048560, size_out = 3746 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3760 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF, type = size, size_out = 7372 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF, size = 1048560, size_out = 7372 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7376 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF, type = size, size_out = 9240 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF, size = 1048560, size_out = 9240 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 9248 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF, type = size, size_out = 6060 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF, size = 1048560, size_out = 6060 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 6064 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF, type = size, size_out = 7668 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF, size = 1048560, size_out = 7668 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7680 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF, type = size, size_out = 4296 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 4296 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4304 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF, type = size, size_out = 5004 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF, size = 1048560, size_out = 5004 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5008 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF, type = size, size_out = 11636 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF, size = 1048560, size_out = 11636 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 11648 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF, type = size, size_out = 4924 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF, size = 1048560, size_out = 4924 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4928 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF, type = size, size_out = 14540 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF, size = 1048560, size_out = 14540 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 14544 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF, type = size, size_out = 13515 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF, size = 1048560, size_out = 13515 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 13520 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF, type = size, size_out = 15733 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF, size = 1048560, size_out = 15733 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 15744 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF, type = size, size_out = 8772 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF, size = 1048560, size_out = 8772 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 8784 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF, type = size, size_out = 1012 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF, size = 1048560, size_out = 1012 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1024 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF, type = size, size_out = 880 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF, size = 1048560, size_out = 880 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 896 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF, type = size, size_out = 14444 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF, size = 1048560, size_out = 14444 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx, size = 14448 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF, type = size, size_out = 12482 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF, size = 1048560, size_out = 12482 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF, size = 12496 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF, type = size, size_out = 5752 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF, size = 1048560, size_out = 5752 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx, size = 5760 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, type = size, size_out = 3016 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF, size = 1048560, size_out = 3016 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3024 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF, type = size, size_out = 4408 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF, size = 1048560, size_out = 4408 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4416 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF, type = size, size_out = 1330 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF, size = 1048560, size_out = 1330 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1344 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF, type = size, size_out = 2378 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF, size = 1048560, size_out = 2378 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2384 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF, type = size, size_out = 3104 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF, size = 1048560, size_out = 3104 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3120 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx, type = size, size_out = 3796 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF, size = 1048560, size_out = 3796 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3808 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF, type = size, size_out = 2436 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF, size = 1048560, size_out = 2436 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2448 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF, type = size, size_out = 14996 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF, size = 1048560, size_out = 14996 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 15008 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF, type = size, size_out = 4236 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF, size = 1048560, size_out = 4236 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4240 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF, type = size, size_out = 49546 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF, size = 1048560, size_out = 49546 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 49552 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF, type = size, size_out = 792 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF, size = 1048560, size_out = 792 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 800 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF, type = size, size_out = 2952 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF, size = 1048560, size_out = 2952 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2960 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF, type = size, size_out = 20784 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF, size = 1048560, size_out = 20784 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 20800 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF, type = size, size_out = 2780 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF, size = 1048560, size_out = 2780 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2784 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\BSTORM.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF, type = size, size_out = 2960 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF, size = 1048560, size_out = 2960 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2976 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF, type = size, size_out = 2080 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF, size = 1048560, size_out = 2080 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2096 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF, type = size, size_out = 2052 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF, size = 1048560, size_out = 2052 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2064 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF, type = size, size_out = 2024 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF, size = 1048560, size_out = 2024 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2032 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF, type = size, size_out = 2084 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF, size = 1048560, size_out = 2084 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2096 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF, type = size, size_out = 900 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF, size = 1048560, size_out = 900 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 912 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF, type = size, size_out = 552 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF, size = 1048560, size_out = 552 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 560 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF, type = size, size_out = 1382 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF, size = 1048560, size_out = 1382 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1392 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00172_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00172_.WMF, type = size, size_out = 2700 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00172_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00172_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00172_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00172_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00172_.WMF, size = 1048560, size_out = 2700 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00172_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2704 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00172_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00172_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ED00172_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00319_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00319_.WMF, type = size, size_out = 2280 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00319_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00319_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00319_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00319_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00319_.WMF, size = 1048560, size_out = 2280 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00319_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2288 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00319_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00319_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00319_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00074_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00397_.WMF, size = 1048560, size_out = 17850 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00074_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 17856 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00397_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00074_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00074_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00086_.WMF, type = size, size_out = 30240 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00077_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00077_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00077_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00077_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00077_.WMF, size = 1048560, size_out = 30240 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00077_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 30256 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00077_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00077_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00077_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00296_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 6068 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00336_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00336_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00336_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00336_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00336_.WMF, size = 1048560, size_out = 6068 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00336_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 6080 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ENVELOPR.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00336_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00336_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00086_.WMF, type = size, size_out = 8424 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00382_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00382_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00382_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00382_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00382_.WMF, size = 1048560, size_out = 8424 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00382_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 8432 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00382_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00382_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00382_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00382_.WMF, type = size, size_out = 7878 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00403_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00403_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00403_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00403_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00403_.WMF, size = 1048560, size_out = 7878 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00403_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7888 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\FLOCH.VRD, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00403_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00403_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EQPLIST.VRD, type = size, size_out = 4796 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00428_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00428_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00428_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00428_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00428_.WMF, size = 1048560, size_out = 4796 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00428_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4800 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00428_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00428_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00428_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00438_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\FLOCH.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 5098 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00438_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5104 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\FLOCH.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00438_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00438_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\FLOCH.VRD.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 1472 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00543_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00543_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00543_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00543_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00543_.WMF, size = 1048560, size_out = 1472 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00543_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1488 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00543_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00543_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00543_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00543_.WMF, type = size, size_out = 896 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00564_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00564_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00564_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00564_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00564_.WMF, size = 1048560, size_out = 896 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00564_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 912 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00564_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00564_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00564_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00564_.WMF, type = size, size_out = 752 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00586_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00586_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00586_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00586_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00586_.WMF, size = 1048560, size_out = 752 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00586_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 768 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00586_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00586_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00586_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01191_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 9010 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00779_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00779_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00779_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00779_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00779_.WMF, size = 1048560, size_out = 9010 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00779_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 9024 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00779_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00779_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00779_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00779_.WMF, type = size, size_out = 2188 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02071_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02071_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02071_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02071_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02071_.WMF, size = 1048560, size_out = 2188 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02071_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2192 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02071_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02071_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02071_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02071_.WMF, type = size, size_out = 4396 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02075_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02075_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02075_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02075_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02075_.WMF, size = 1048560, size_out = 4396 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02075_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4400 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02075_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02075_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02075_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00057_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 3764 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00057_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3776 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00057_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00057_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00235_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_K_COL.HXK, size = 1048560, size_out = 1026 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00235_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1040 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00235_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00235_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_K_COL.HXK, type = size, size_out = 1960 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00241_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00241_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00241_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00241_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00241_.WMF, size = 1048560, size_out = 1960 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00241_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1968 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00241_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00241_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00241_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXC, type = size, size_out = 3662 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00260_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00260_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00260_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00260_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00260_.WMF, size = 1048560, size_out = 3662 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00260_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3664 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00260_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00260_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00260_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00260_.WMF, type = size, size_out = 3298 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00443_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00443_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00443_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00443_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00443_.WMF, size = 1048560, size_out = 3298 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00443_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3312 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00443_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00443_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00443_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00443_.WMF, type = size, size_out = 13538 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00526_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00526_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00526_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00526_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00526_.WMF, size = 1048560, size_out = 13538 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00526_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 13552 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INSTLIST.VRD, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00526_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00526_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MAPISHELLR.DLL, type = size, size_out = 12632 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00612_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00612_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00612_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00612_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00612_.WMF, size = 1048560, size_out = 12632 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00612_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 12640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00612_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00612_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00612_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00612_.WMF, type = size, size_out = 4340 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00687_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00687_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00687_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00687_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00687_.WMF, size = 1048560, size_out = 4340 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 4352 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00687_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00687_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00687_.WMF, type = size, size_out = 2848 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01013_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01013_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01013_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01013_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01013_.WMF, size = 1048560, size_out = 2848 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01013_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2864 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01013_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01013_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01013_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01013_.WMF, type = size, size_out = 1148 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01015_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01015_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01015_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01015_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01015_.WMF, size = 1048560, size_out = 1148 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01015_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1152 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01015_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01015_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01015_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01015_.WMF, type = size, size_out = 1268 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01065_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01065_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01065_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01065_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01065_.WMF, size = 1048560, size_out = 1268 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01065_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1280 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01065_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01065_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01065_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01065_.WMF, type = size, size_out = 5000 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01080_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01080_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01080_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01080_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01080_.WMF, size = 1048560, size_out = 5000 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01080_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5008 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01080_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01080_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01080_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01080_.WMF, type = size, size_out = 7340 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01242_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01242_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01242_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01242_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01242_.WMF, size = 1048560, size_out = 7340 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01242_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7344 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01242_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01242_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01242_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01242_.WMF, type = size, size_out = 15806 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01291_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01291_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01291_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01291_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01291_.WMF, size = 1048560, size_out = 15806 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01291_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 15808 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01291_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01291_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01291_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00116_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_K_COL.HXK, size = 1048560, size_out = 15852 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00116_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 15856 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00116_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00116_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSOUC_K_COL.HXK, type = size, size_out = 2832 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00172_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00172_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00172_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00172_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00172_.WMF, size = 1048560, size_out = 2832 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00172_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2848 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00172_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00172_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00172_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00172_.WMF, type = size, size_out = 68776 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00426_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00426_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00426_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00426_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00426_.WMF, size = 1048560, size_out = 68776 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00426_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 68784 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00426_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00426_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HM00426_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00233_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 696 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00346_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00346_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00346_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00346_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00346_.WMF, size = 1048560, size_out = 696 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00346_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 704 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00346_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00346_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00346_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 2944 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00957_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00957_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00957_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00957_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00957_.WMF, size = 1048560, size_out = 2944 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00957_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2960 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00957_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00957_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00957_.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00957_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 1220 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0075478.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0075478.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0075478.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0075478.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0075478.GIF, size = 1048560, size_out = 1220 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0075478.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1232 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0075478.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0075478.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0075478.GIF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0075478.GIF, type = size, size_out = 21782 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086426.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086426.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086426.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086426.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086426.WMF, size = 1048560, size_out = 21782 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086426.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 21792 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086426.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086426.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086426.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086426.WMF, type = size, size_out = 21268 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090027.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090027.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090027.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090027.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090027.WMF, size = 1048560, size_out = 21268 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090027.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 21280 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090027.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090027.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090027.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OIS.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 5314 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090781.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090781.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090781.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090781.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090781.WMF, size = 1048560, size_out = 5314 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_F_COL.HXK, size = 5328 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090781.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_F_COL.HXK, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090781.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 42050 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0093905.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0093905.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0093905.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0093905.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0093905.WMF, size = 1048560, size_out = 42050 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0093905.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 42064 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0093905.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0093905.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0093905.WMF True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.HOL.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 18258 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099148.JPG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099148.JPG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099148.JPG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099148.JPG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099148.JPG, size = 1048560, size_out = 18258 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099148.JPG.id-9C354B42.[bestdecoding@cock.li].best, size = 18272 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099148.JPG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099148.JPG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099148.JPG True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_F_COL.HXK, type = size, size_out = 8826 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099155.JPG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099155.JPG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099155.JPG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099155.JPG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
For performance reasons, the remaining 361 entries are omitted.
The remaining entries can be found in glog.xml.
Thread 0x764
1107 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 1
Fn
File Create filename = C:\Boot\Fonts\wgl4_boot.ttf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\memtest.exe, type = size, size_out = 47452 True 1
Fn
File Get Info filename = C:\Boot\Fonts\wgl4_boot.ttf, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\Fonts\wgl4_boot.ttf.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\Fonts\wgl4_boot.ttf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui, type = size, size_out = 3584 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui, type = size, size_out = 3584 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, type = size, size_out = 4096 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, type = size, size_out = 4608 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png, type = size, size_out = 537504 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE, type = size, size_out = 204168 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL, type = size, size_out = 7379816 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL, type = size, size_out = 752552 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL, type = size, size_out = 1870696 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL, type = size, size_out = 591736 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL, type = size, size_out = 813824 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL, type = size, size_out = 49488 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\WISC30.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\WISC30.DLL, type = size, size_out = 147344 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\WISC30.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\WISC30.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\WISC30.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF, type = size, size_out = 148736 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB, type = size, size_out = 13684 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.ELM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.ELM, type = size, size_out = 47684 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.ELM, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.ELM.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.INF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.INF, type = size, size_out = 610 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.INF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.INF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.ELM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.ELM, type = size, size_out = 54803 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.ELM, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.ELM.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.INF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.INF, type = size, size_out = 484 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.INF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.INF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1XTOR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1XTOR.DLL, type = size, size_out = 70544 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1XTOR.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1XTOR.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1XTOR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\WTSP61MS.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\WTSP61MS.DLL, type = size, size_out = 221184 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\WTSP61MS.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\WTSP61MS.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\WTSP61MS.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBE7INTL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBE7INTL.DLL, type = size, size_out = 154960 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBE7INTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBE7INTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBE7INTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\VBE7.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\VBE7.DLL, type = size, size_out = 3675976 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\VBE7.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\VBE7.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\VBE7.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\VBE7.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll, type = size, size_out = 990032 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll, type = size, size_out = 855376 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll, type = size, size_out = 1110528 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\DVDMaker.exe, destination_filename = C:\Program Files\DVD Maker\DVDMaker.exe.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\OmdBase.dll, destination_filename = C:\Program Files\DVD Maker\OmdBase.dll.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\OmdProject.dll, destination_filename = C:\Program Files\DVD Maker\OmdProject.dll.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Pipeline.dll, destination_filename = C:\Program Files\DVD Maker\Pipeline.dll.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\PipeTran.dll, destination_filename = C:\Program Files\DVD Maker\PipeTran.dll.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msmdlocal.dll, destination_filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msmdlocal.dll.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msmgdsrv.dll, destination_filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msmgdsrv.dll.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msolap100.dll, destination_filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msolap100.dll.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, size = 1048560, size_out = 666456 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll.id-9C354B42.[bestdecoding@cock.li].best, size = 666464 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID, type = size, size_out = 4846 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID, size = 1048560, size_out = 4846 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 4848 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID, type = size, size_out = 8568 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID, size = 1048560, size_out = 8568 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 8576 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID, type = size, size_out = 6644 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID, size = 1048560, size_out = 6644 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 6656 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID, type = size, size_out = 6020 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID, size = 1048560, size_out = 6020 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 6032 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID, type = size, size_out = 7347 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID, size = 1048560, size_out = 7347 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 7360 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID, type = size, size_out = 5393 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID, size = 1048560, size_out = 5393 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 5408 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID, type = size, size_out = 14044 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID, size = 1048560, size_out = 14044 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 14048 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID, type = size, size_out = 8501 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID, size = 1048560, size_out = 8501 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 8512 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID, type = size, size_out = 4961 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID, size = 1048560, size_out = 4961 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 4976 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx, type = size, size_out = 21089 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx, size = 1048560, size_out = 21089 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 21104 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 49025 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx, size = 1048560, size_out = 49025 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 49040 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx, type = size, size_out = 42917 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx, size = 1048560, size_out = 42917 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 42928 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx, type = size, size_out = 32818 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx, size = 1048560, size_out = 32818 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 32832 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx, type = size, size_out = 533988 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx, size = 1048560, size_out = 533988 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF, size = 534000 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx, type = size, size_out = 18226 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx, size = 1048560, size_out = 18226 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 18240 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx, type = size, size_out = 350689 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx, size = 1048560, size_out = 350689 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 350704 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx, type = size, size_out = 40941 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx, size = 1048560, size_out = 40941 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 40944 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF, type = size, size_out = 23692 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx, size = 1048560, size_out = 23692 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 23696 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx, type = size, size_out = 129924 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx, size = 1048560, size_out = 129924 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 129936 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF, type = size, size_out = 112504 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx, size = 1048560, size_out = 112504 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 112512 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\given-schemes.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\given-schemes.exe, type = size, size_out = 75264 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\given-schemes.exe, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\given-schemes.exe.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\given-schemes.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML, type = size, size_out = 312400 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML, size = 1048560, size_out = 312400 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML.id-9C354B42.[bestdecoding@cock.li].best, size = 312416 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.DLL, type = size, size_out = 15776 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW, type = size, size_out = 492624 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW, size = 1048560, size_out = 492624 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\AECUTILS.VSL, size = 492640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\AECUTILS.VSL, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\BCSRuntimeRes.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\BCSRuntimeRes.dll, type = size, size_out = 24960 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\BCSRuntimeRes.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\BCSRuntimeRes.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\BCSRuntimeRes.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\BHOINTL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\BHOINTL.DLL, type = size, size_out = 10104 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\BHOINTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\BHOINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\BHOINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\BSTORM.VSL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF, type = size, size_out = 45968 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\BSTORM.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\BSTORM.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\BSTORM.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\BSTORM.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\BSTORM.VSL, size = 1048560, size_out = 45968 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\BSTORM.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 45984 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\BSTORM.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\BSTORM.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\BSTORM.VSL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\CERTINTL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\CERTINTL.DLL, type = size, size_out = 12176 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\CERTINTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\CERTINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\CERTINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\CLVWINTL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\CLVWINTL.DLL, type = size, size_out = 19880 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\CLVWINTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\CLVWINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\CLVWINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\CMAXRES.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 35216 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\CMAXRES.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\CMAXRES.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\CMAXRES.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DL_RES.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DL_RES.DLL, type = size, size_out = 10632 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DL_RES.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DL_RES.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DL_RES.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DOORSCHD.VRD, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DOORSCHD.VRD, type = size, size_out = 1723 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DOORSCHD.VRD, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DOORSCHD.VRD.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DOORSCHD.VRD, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DOORSCHD.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\DOORSCHD.VRD, size = 1048560, size_out = 1723 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\DOORSCHD.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 1728 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\DOORSCHD.VRD, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\DOORSCHD.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\DOORSCHD.VRD True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DRILLDWN.VSL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DRILLDWN.VSL, type = size, size_out = 64872 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DRILLDWN.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\DRILLDWN.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DRILLDWN.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\DRILLDWN.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\DRILLDWN.VSL, size = 1048560, size_out = 64872 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\DRILLDWN.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 64880 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\DRILLDWN.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\DRILLDWN.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\DRILLDWN.VSL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EDITRES.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00077_.WMF, type = size, size_out = 19840 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EDITRES.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EDITRES.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EDITRES.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV.HXS, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV.HXS, type = size, size_out = 7024126 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV.HXS, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV.HXS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 641 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 656 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXC True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00397_.WMF, type = size, size_out = 2043 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VRD, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VRD.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VRD, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VRD, size = 1048560, size_out = 2043 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 2048 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VRD, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VRD True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GANTT.VRD, type = size, size_out = 186880 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GR8GALRY.GRA, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GR8GALRY.GRA.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GR8GALRY.GRA, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GR8GALRY.GRA.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GR8GALRY.GRA, size = 1048560, size_out = 186880 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GR8GALRY.GRA.id-9C354B42.[bestdecoding@cock.li].best, size = 186896 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GR8GALRY.GRA, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GR8GALRY.GRA.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\GR8GALRY.GRA True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00586_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\GRAPH_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.DLL, type = size, size_out = 37760 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.DLL.IDX_DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.DLL.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.DLL.IDX_DLL, size = 1048560, size_out = 37760 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 37776 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.DLL.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 252 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.DLL.IDX_DLL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.DLL.IDX_DLL, type = size, size_out = 218 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXT, size = 1048560, size_out = 218 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 240 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXT True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXT, type = size, size_out = 111 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_F_COL.HXK, size = 1048560, size_out = 111 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 112 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\GROOVE_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 481168 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFINTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR.HXS.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 432098 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 432112 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 248 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR.HXS True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXT, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FLAP.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FLAP.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 260 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATHEDITOR_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02161_.WMF, type = size, size_out = 208 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXT, size = 1048560, size_out = 208 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 244 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXT True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_COL.HXT, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 248 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_F_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 248 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_K_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MAPIR.DLL, type = size, size_out = 39296 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\LGND.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\LGND.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\LGND.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\LGND.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\LGND.VSL, size = 1048560, size_out = 39296 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\LGND.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 39312 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\LGND.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\LGND.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 228 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\LGND.VSL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MOR6INT.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 1420 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MOVE.VRD, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MOVE.VRD.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MOVE.VRD, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MOVE.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MOVE.VRD, size = 1048560, size_out = 1420 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MOVE.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 1424 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MOVE.VRD, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MOVE.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 228 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MOVE.VRD True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MOVE.VRD, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSO.ACL, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSO.ACL, size = 256 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_K_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00669_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 209 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXT, size = 1048560, size_out = 209 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXT True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXT, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_F_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00346_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00346_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB.DEV_K_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSPUB_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 389716 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE.HXS, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE.HXS.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE.HXS, size = 1048560, size_out = 389716 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 389728 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE.HXS, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE.HXS True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0090027.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 1098 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ORGPOS.VRD, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ORGPOS.VRD.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ORGPOS.VRD, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\ORGPOS.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ORGPOS.VRD, size = 1048560, size_out = 1098 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ORGPOS.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 1104 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\ORGPOS.VRD, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\ORGPOS.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\ORGPOS.VRD True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\ORGPOS.VRD, type = size, size_out = 290688 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.REST.IDX_DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.REST.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.REST.IDX_DLL, size = 1048560, size_out = 290688 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 290704 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.REST.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 254 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.REST.IDX_DLL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.REST.IDX_DLL, type = size, size_out = 6988760 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV.HXS, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV.HXS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.REST.IDX_DLL, size = 1048560, size_out = 651 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 656 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLLIBR.REST.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXC True 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\PJINTL.DLL, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\PJINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\PROPRPT.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\PPINTL.REST.IDX_DLL, size = 1048560, size_out = 137096 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\PROPRPT.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 137104 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\PPINTL.REST.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\PROPRPT.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\PROPRPT.VSL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 207 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXT, size = 1048560, size_out = 207 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 208 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXT True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_COL.HXT, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_F_COL.HXK True 1
Fn
File Get Info type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\UML.VSL, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\UML.VSL, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\SETLANG_K_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099163.WMF, type = size, size_out = 19328 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISBRRES.DLL.IDX_DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISBRRES.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISBRRES.DLL.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISBRRES.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISBRRES.DLL.IDX_DLL, size = 1048560, size_out = 19328 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISBRRES.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 19344 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISBRRES.DLL.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISBRRES.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 252 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISBRRES.DLL.IDX_DLL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISBRRES.DLL.IDX_DLL, type = size, size_out = 43392 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISCOLOR.VSL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISCOLOR.VSL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISCOLOR.VSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISCOLOR.VSL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISCOLOR.VSL, size = 1048560, size_out = 43392 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISCOLOR.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 43408 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISCOLOR.VSL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISCOLOR.VSL.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISCOLOR.VSL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISCOLOR.VSL, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 264 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_K_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.SHAPESHEET_K_COL.HXK, type = size, size_out = 621 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXC, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXC, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXC, size = 1048560, size_out = 621 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 624 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXC, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXC True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXC, type = size, size_out = 209 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_COL.HXT, size = 1048560, size_out = 209 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_COL.HXT True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_COL.HXT, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_K_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_PRM_K_COL.HXK, type = size, size_out = 209 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_COL.HXT, size = 1048560, size_out = 209 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO_STD_COL.HXT True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0102002.WMF, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0102002.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 254 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.DEV_K_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0102002.WMF, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_F_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 246 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_K_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ_K_COL.HXK, type = size, size_out = 1544 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINSCHD.VRD, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINSCHD.VRD.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINSCHD.VRD, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINSCHD.VRD.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINSCHD.VRD, size = 1048560, size_out = 1544 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINSCHD.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 1552 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINSCHD.VRD, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINSCHD.VRD.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WINSCHD.VRD True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINSCHD.VRD, type = size, size_out = 211 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXT, size = 1048560, size_out = 211 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXT.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXT True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXT, type = size, size_out = 114 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_F_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_F_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_F_COL.HXK, size = 1048560, size_out = 114 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_F_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_F_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 254 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_F_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_F_COL.HXK, type = size, size_out = 113 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_K_COL.HXK, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_K_COL.HXK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_K_COL.HXK, size = 1048560, size_out = 113 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 254 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_K_COL.HXK True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_K_COL.HXK, type = size, size_out = 5240293 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.HXS, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.HXS.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.HXS, destination_filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.HXS.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_K_COL.HXK, size = 1048560, size_out = 631 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_COL.HXC.id-9C354B42.[bestdecoding@cock.li].best, size = 242 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD_COL.HXC True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_K_COL.HXK, type = size, size_out = 901464 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_K_COL.HXK, size = 1048560, size_out = 108416 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 108432 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_K_COL.HXK, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 248 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.DLL.IDX_DLL True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_K_COL.HXK, type = size, size_out = 614784 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL, size = 1048560, size_out = 614784 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 614800 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101866.BMP, size = 1048560, size_out = 383872 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 383888 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101866.BMP, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 254 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\1033\XLINTL32.REST.IDX_DLL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\3082\MSO.ACL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101866.BMP, size = 1048560, size_out = 50556 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\3082\MSO.ACL.id-9C354B42.[bestdecoding@cock.li].best, size = 50560 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101866.BMP, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\3082\MSO.ACL.id-9C354B42.[bestdecoding@cock.li].best, size = 226 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\3082\MSO.ACL True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\ADDINS\OUTEX.ECF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101866.BMP, size = 1048560, size_out = 1926 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\ADDINS\OUTEX.ECF.id-9C354B42.[bestdecoding@cock.li].best, size = 1936 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0101866.BMP, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\ADDINS\OUTEX.ECF.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\ADDINS\OUTEX.ECF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\ASCIIENG.LNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, size = 1048560, size_out = 286848 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\BCSClientManifest.man.id-9C354B42.[bestdecoding@cock.li].best, size = 286864 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\WINPROJ.HXS, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\BCSClientManifest.man.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\ASCIIENG.LNG True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART13.BDR.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read size = 1048560, size_out = 28368 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART13.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 28384 True 1
Fn
Data
File Read size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART13.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART13.BDR True 1
Fn
File Get Info type = size, size_out = 57646 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR, size = 1048560, size_out = 57646 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 57648 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\ACT3R.SAM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 13192 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\ACT3R.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 13200 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\MSTORE.HXS.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\ACT3R.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\ACT3R.SAM True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLADDR.FAE.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 13744 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLADDR.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 13760 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLADDR.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLADDR.FAE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLNOTER.FAE.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 9648 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLNOTER.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 9664 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLNOTER.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\OLNOTER.FAE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\ORG97R.SAM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 12704 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\ORG97R.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 12720 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\ORG97R.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\1033\ORG97R.SAM True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\ACT3.SAM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 90488 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\ACT3.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 90496 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\ACT3.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 228 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\ACT3.SAM True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\ODBC.SAM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 63864 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\ODBC.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 63872 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\ODBC.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 228 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\ODBC.SAM True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OL.SAM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 29056 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OL.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 29072 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OL.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OL.SAM True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLJRNL.FAE.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 71584 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLJRNL.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 71600 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\1033\VISIO.DEV_K_COL.HXK.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLJRNL.FAE.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\OLJRNL.FAE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\Office14\CONVERT\ORG97.SAM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\Office14\CONVERT\DESKSAM.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 50568 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\ORG97.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 50576 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\Office14\CONVERT\DESKSAM.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\Office14\CONVERT\ORG97.SAM.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\Office14\CONVERT\ORG97.SAM True 1
Fn
For performance reasons, the remaining 19 entries are omitted.
The remaining entries can be found in glog.xml.
Process #8: 1.exe
94 0
»
Information Value
ID #8
File Name c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\1.exe
Command Line "C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1.exe"
Initial Working Directory C:\Windows\system32\
Monitor Start Time: 00:02:10, Reason: Autostart
Unmonitor End Time: 00:02:36, Reason: Self Terminated
Monitor Duration 00:00:26
OS Process Information
»
Information Value
PID 0x4fc
Parent PID 0x3a4 (c:\windows\system32\sdclt.exe)
Is Created or Modified Executable True
Integrity Level Medium
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege
Thread IDs
0x 500
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory rw True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000020000 0x00020000 0x00020fff Pagefile Backed Memory r True False False -
private_0x0000000000030000 0x00030000 0x00031fff Private Memory rw True False False -
private_0x0000000000030000 0x00030000 0x00030fff Private Memory rw True False False -
apisetschema.dll 0x00040000 0x00040fff Memory Mapped File rwx False False False -
private_0x0000000000050000 0x00050000 0x0008ffff Private Memory rw True False False -
private_0x0000000000090000 0x00090000 0x0018ffff Private Memory rw True False False -
pagefile_0x0000000000190000 0x00190000 0x00193fff Pagefile Backed Memory r True False False -
locale.nls 0x001a0000 0x00206fff Memory Mapped File r False False False -
private_0x0000000000210000 0x00210000 0x00210fff Private Memory rw True False False -
private_0x0000000000220000 0x00220000 0x00220fff Private Memory rw True False False -
private_0x0000000000230000 0x00230000 0x0023ffff Private Memory rw True False False -
pagefile_0x0000000000230000 0x00230000 0x0023afff Pagefile Backed Memory rw True False False -
private_0x0000000000230000 0x00230000 0x00230fff Private Memory rw True False False -
pagefile_0x0000000000240000 0x00240000 0x0024afff Pagefile Backed Memory rw True False False -
private_0x0000000000240000 0x00240000 0x00270fff Private Memory rw True False False -
private_0x0000000000280000 0x00280000 0x00280fff Private Memory rw True False False -
private_0x0000000000290000 0x00290000 0x0029ffff Private Memory rw True False False -
private_0x0000000000290000 0x00290000 0x00290fff Private Memory rw True False False -
private_0x00000000002a0000 0x002a0000 0x002a0fff Private Memory rwx True False False -
private_0x00000000002b0000 0x002b0000 0x002b0fff Private Memory rwx True False False -
private_0x00000000002c0000 0x002c0000 0x002c1fff Private Memory rwx True False False -
private_0x00000000002d0000 0x002d0000 0x002dffff Private Memory rwx True False False -
private_0x00000000002e0000 0x002e0000 0x002e1fff Private Memory rwx True False False -
private_0x00000000002f0000 0x002f0000 0x002f0fff Private Memory rwx True False False -
private_0x0000000000370000 0x00370000 0x003effff Private Memory rw True False False -
1.exe 0x00400000 0x00887fff Memory Mapped File rwx True True False
...
pagefile_0x0000000000890000 0x00890000 0x00a17fff Pagefile Backed Memory r True False False -
private_0x0000000000a40000 0x00a40000 0x00a4ffff Private Memory rw True False False -
private_0x0000000000a60000 0x00a60000 0x00b5ffff Private Memory rw True False False -
pagefile_0x0000000000b60000 0x00b60000 0x00ce0fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000cf0000 0x00cf0000 0x020effff Pagefile Backed Memory r True False False -
1.exe 0x020f0000 0x022a4fff Memory Mapped File r True False False -
private_0x00000000022c0000 0x022c0000 0x022cffff Private Memory rw True False False -
pagefile_0x00000000022d0000 0x022d0000 0x026dffff Pagefile Backed Memory rw True False False -
sortdefault.nls 0x022d0000 0x0259efff Memory Mapped File r False False False -
private_0x00000000025a0000 0x025a0000 0x0278ffff Private Memory rw True False False -
pagefile_0x00000000026e0000 0x026e0000 0x02aeffff Pagefile Backed Memory rw True False False -
comctl32.dll 0x73650000 0x736d3fff Memory Mapped File rwx False False False -
wow64cpu.dll 0x73880000 0x73887fff Memory Mapped File rwx False False False -
wow64win.dll 0x73890000 0x738ebfff Memory Mapped File rwx False False False -
wow64.dll 0x738f0000 0x7392efff Memory Mapped File rwx False False False -
mpr.dll 0x74d00000 0x74d11fff Memory Mapped File rwx False False False -
winmm.dll 0x74e10000 0x74e41fff Memory Mapped File rwx False False False -
cryptbase.dll 0x74e60000 0x74e6bfff Memory Mapped File rwx False False False -
sspicli.dll 0x74e70000 0x74ecffff Memory Mapped File rwx False False False -
kernelbase.dll 0x74ed0000 0x74f15fff Memory Mapped File rwx False False False -
sechost.dll 0x751d0000 0x751e8fff Memory Mapped File rwx False False False -
ws2_32.dll 0x751f0000 0x75224fff Memory Mapped File rwx False False False -
usp10.dll 0x75250000 0x752ecfff Memory Mapped File rwx False False False -
shell32.dll 0x75300000 0x75f49fff Memory Mapped File rwx False False False -
imagehlp.dll 0x75f50000 0x75f79fff Memory Mapped File rwx False False False -
rpcrt4.dll 0x75f80000 0x7606ffff Memory Mapped File rwx False False False -
kernel32.dll 0x760a0000 0x761affff Memory Mapped File rwx False False False -
msvcrt.dll 0x761b0000 0x7625bfff Memory Mapped File rwx False False False -
nsi.dll 0x766b0000 0x766b5fff Memory Mapped File rwx False False False -
imm32.dll 0x766c0000 0x7671ffff Memory Mapped File rwx False False False -
advapi32.dll 0x76720000 0x767bffff Memory Mapped File rwx False False False -
shlwapi.dll 0x767c0000 0x76816fff Memory Mapped File rwx False False False -
lpk.dll 0x769d0000 0x769d9fff Memory Mapped File rwx False False False -
gdi32.dll 0x76a70000 0x76afffff Memory Mapped File rwx False False False -
user32.dll 0x76bb0000 0x76caffff Memory Mapped File rwx False False False -
msctf.dll 0x76df0000 0x76ebbfff Memory Mapped File rwx False False False -
private_0x0000000076f10000 0x76f10000 0x77009fff Private Memory rwx True False False -
private_0x0000000077010000 0x77010000 0x7712efff Private Memory rwx True False False -
ntdll.dll 0x77130000 0x772d8fff Memory Mapped File rwx False False False -
ntdll.dll 0x77310000 0x7748ffff Memory Mapped File rwx False False False -
pagefile_0x000000007efb0000 0x7efb0000 0x7efd2fff Pagefile Backed Memory r True False False -
private_0x000000007efdb000 0x7efdb000 0x7efddfff Private Memory rw True False False -
private_0x000000007efde000 0x7efde000 0x7efdefff Private Memory rw True False False -
private_0x000000007efdf000 0x7efdf000 0x7efdffff Private Memory rw True False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory r True False False -
pagefile_0x000000007efe0000 0x7efe0000 0x7f0dffff Pagefile Backed Memory r True False False -
private_0x000000007f0e0000 0x7f0e0000 0x7ffdffff Private Memory r True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
private_0x000000007fff0000 0x7fff0000 0x7fffffeffff Private Memory r True False False -
Hook Information
»
Type Installer Target Size Information Actions
Code 1.exe:+0x111060 ntdll.dll:DbgBreakPoint+0x0 1 bytes -
...
Threads
Thread 0x500
94 0
»
Category Operation Information Success Count Logfile
Module Load module_name = USER32.dll, base_address = 0x76bb0000 True 1
Fn
Module Load module_name = ADVAPI32.dll, base_address = 0x76720000 True 1
Fn
Module Load module_name = NTDLL.dll, base_address = 0x77310000 True 1
Fn
System Get Time type = Local Time, time = 2019-01-23 21:45:49 (Local Time) True 1
Fn
File Create filename = \\.\SICE, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = \\.\SIWVID, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = \\.\NTICE, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
System Get Info type = Operating System True 1
Fn
Registry Open Key reg_name = HKEY_CURRENT_USER\Software\Wine False 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__ False 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = GetNativeSystemInfo, address_out = 0x760c10b5 True 1
Fn
System Get Info type = Hardware Information True 1
Fn
System Get Info type = Operating System True 1
Fn
Module Load module_name = winmm.dll, base_address = 0x74e10000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\winmm.dll, function = timeGetTime, address_out = 0x74e126e0 True 1
Fn
System Sleep duration = 50 milliseconds (0.050 seconds) True 1
Fn
System Get Info type = Operating System True 1
Fn
System Get Info type = System Directory, result_out = C:\Windows\system32 True 1
Fn
Debug Print process_name = c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\1.exe, type = DEBUG_STRING, text = %s------------------------------------------------ --- Themida Professional --- --- (c)2012 Oreans Technologies --- ------------------------------------------------ True 1
Fn
Module Load module_name = NTDLL, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtOpenThread, address_out = 0x77331128 True 1
Fn
Module Load module_name = winmm.dll, base_address = 0x74e10000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\winmm.dll, function = timeGetTime, address_out = 0x74e126e0 True 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000 True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000, value_name = DriverDesc, data = 83 True 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\Hardware\description\System True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Hardware\description\System, value_name = SystemBiosVersion, data = 80 True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Hardware\description\System, value_name = VideoBiosVersion, data = 80 False 1
Fn
Window Find class_name = OLLYDBG False 1
Fn
Window Find class_name = GBDYLLO False 1
Fn
Window Find class_name = pediy06 False 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x7732fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x7732fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x7732fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
System Get Info type = System Directory, result_out = C:\Windows\system32 True 1
Fn
File Create filename = C:\Windows\system32\ntdll.dll, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_SYSTEM, share_mode = FILE_SHARE_READ True 1
Fn
File Read filename = C:\Windows\system32\ntdll.dll, size = 32, size_out = 32 True 1
Fn
Data
Debug Check for Presence c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\1.exe True 1
Fn
System Get Info type = Operating System True 1
Fn
Debug Check for Presence c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\1.exe True 1
Fn
Debug Hide c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\1.exe True 1
Fn
Debug Check for Presence c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\1.exe True 1
Fn
Window Find class_name = FilemonClass False 1
Fn
Window Find window_name = File Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Window Find class_name = PROCMON_WINDOW_CLASS False 1
Fn
Window Find window_name = Process Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x7732fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Window Find class_name = RegmonClass False 1
Fn
Window Find window_name = Registry Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Window Find class_name = 18467-41 False 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x7732fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Filename process_name = c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\1.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 256 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = RtlAllocateHeap, address_out = 0x7733e026 True 1
Fn
System Get Info type = Operating System True 1
Fn
Module Load module_name = KERNEL32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Filename process_name = c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\1.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 512 True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ True 1
Fn
Module Create Mapping module_name = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, protection = PAGE_READONLY, maximum_size = 0 True 1
Fn
Module Map C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, process_name = c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\1.exe, desired_access = FILE_MAP_READ True 1
Fn
Module Load module_name = imagehlp.dll, base_address = 0x75f50000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\imagehlp.dll, function = CheckSumMappedFile, address_out = 0x75f58303 True 1
Fn
Module Unmap process_name = c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\1.exe True 1
Fn
System Get Time type = Local Time, time = 2019-01-23 21:46:03 (Local Time) True 1
Fn
Debug Check for Presence c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\1.exe True 1
Fn
Window Find class_name = FilemonClass False 1
Fn
Window Find window_name = File Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Window Find class_name = PROCMON_WINDOW_CLASS False 1
Fn
Window Find window_name = Process Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x7732fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77310000 True 2
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = RtlAllocateHeap, address_out = 0x7733e026 True 1
Fn
System Get Time type = Ticks, time = 41917 True 3
Fn
System Get Info type = Operating System True 1
Fn
Mutex Open mutex_name = Global\syncronize_6LSDY1A, desired_access = SYNCHRONIZE True 1
Fn
Mutex Open mutex_name = Global\syncronize_6LSDY1U, desired_access = SYNCHRONIZE True 1
Fn
System Get Info type = Operating System True 1
Fn
Process #9: cmd.exe
280 0
»
Information Value
ID #9
File Name c:\windows\system32\cmd.exe
Command Line "C:\Windows\system32\cmd.exe"
Initial Working Directory C:\Windows\system32\
Monitor Start Time: 00:02:36, Reason: Child Process
Unmonitor End Time: 00:02:42, Reason: Self Terminated
Monitor Duration 00:00:06
OS Process Information
»
Information Value
PID 0x710
Parent PID 0x4f0 (c:\programdata\microsoft\windows\start menu\programs\startup\1.exe)
Is Created or Modified Executable False
Integrity Level Medium
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege
Thread IDs
0x 714
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory rw True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000020000 0x00020000 0x0002ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000030000 0x00030000 0x00033fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000040000 0x00040000 0x00040fff Pagefile Backed Memory r True False False -
locale.nls 0x00050000 0x000b6fff Memory Mapped File r False False False -
pagefile_0x00000000000c0000 0x000c0000 0x000c6fff Pagefile Backed Memory r True False False -
pagefile_0x00000000000d0000 0x000d0000 0x000d1fff Pagefile Backed Memory rw True False False -
private_0x00000000000e0000 0x000e0000 0x000e0fff Private Memory rw True False False -
private_0x00000000000f0000 0x000f0000 0x000f0fff Private Memory rw True False False -
c_1251.nls 0x00100000 0x00110fff Memory Mapped File r False False False -
private_0x0000000000190000 0x00190000 0x0028ffff Private Memory rw True False False -
private_0x0000000000290000 0x00290000 0x0038ffff Private Memory rw True False False -
private_0x00000000003a0000 0x003a0000 0x003affff Private Memory rw True False False -
private_0x00000000003f0000 0x003f0000 0x004effff Private Memory rw True False False -
pagefile_0x00000000004f0000 0x004f0000 0x00677fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000680000 0x00680000 0x00800fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000810000 0x00810000 0x01c0ffff Pagefile Backed Memory r True False False -
pagefile_0x0000000001c10000 0x01c10000 0x01f52fff Pagefile Backed Memory r True False False -
basebrd.dll 0x01f60000 0x02027fff Memory Mapped File r False False False -
pagefile_0x0000000002030000 0x02030000 0x02422fff Pagefile Backed Memory r True False False -
sortdefault.nls 0x02430000 0x026fefff Memory Mapped File r False False False -
cmd.exe 0x49ec0000 0x49f18fff Memory Mapped File rwx True False False -
user32.dll 0x76f10000 0x77009fff Memory Mapped File rwx False False False -
kernel32.dll 0x77010000 0x7712efff Memory Mapped File rwx False False False -
ntdll.dll 0x77130000 0x772d8fff Memory Mapped File rwx False False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory r True False False -
pagefile_0x000000007efe0000 0x7efe0000 0x7f0dffff Pagefile Backed Memory r True False False -
private_0x000000007f0e0000 0x7f0e0000 0x7ffdffff Private Memory r True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
private_0x000000007fffe000 0x7fffe000 0x7fffefff Private Memory rw True False False -
winbrand.dll 0x7fef78e0000 0x7fef78e7fff Memory Mapped File rwx False False False -
kernelbase.dll 0x7fefd150000 0x7fefd1bafff Memory Mapped File rwx False False False -
msctf.dll 0x7fefd530000 0x7fefd638fff Memory Mapped File rwx False False False -
msvcrt.dll 0x7fefd660000 0x7fefd6fefff Memory Mapped File rwx False False False -
imm32.dll 0x7fefd830000 0x7fefd85dfff Memory Mapped File rwx False False False -
usp10.dll 0x7fefefd0000 0x7feff098fff Memory Mapped File rwx False False False -
gdi32.dll 0x7feff0a0000 0x7feff106fff Memory Mapped File rwx False False False -
lpk.dll 0x7feff200000 0x7feff20dfff Memory Mapped File rwx False False False -
apisetschema.dll 0x7feff450000 0x7feff450fff Memory Mapped File rwx False False False -
pagefile_0x000007fffffb0000 0x7fffffb0000 0x7fffffd2fff Pagefile Backed Memory r True False False -
private_0x000007fffffdd000 0x7fffffdd000 0x7fffffdefff Private Memory rw True False False -
private_0x000007fffffdf000 0x7fffffdf000 0x7fffffdffff Private Memory rw True False False -
Threads
Thread 0x714
280 0
»
Category Operation Information Success Count Logfile
System Get Time type = System Time, time = 2019-01-23 10:46:04 (UTC) True 1
Fn
System Get Time type = Ticks, time = 42385 True 1
Fn
Module Get Handle module_name = c:\windows\system32\cmd.exe, base_address = 0x49ec0000 True 1
Fn
Module Get Handle module_name = c:\windows\system32\kernel32.dll, base_address = 0x77010000 True 1
Fn
Module Get Address module_name = c:\windows\system32\kernel32.dll, function = SetThreadUILanguage, address_out = 0x77026d40 True 1
Fn
Registry Open Key reg_name = HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System False 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 2
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
Environment Get Environment String - True 2
Fn
Data
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DisableUNCCheck, data = 24, type = REG_NONE False 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DelayedExpansion, data = 1, type = REG_NONE False 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = CompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = PathCompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = AutoRun, data = 64, type = REG_NONE False 1
Fn
Registry Open Key reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DisableUNCCheck, data = 64, type = REG_NONE False 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DelayedExpansion, data = 1, type = REG_NONE False 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = CompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = PathCompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = AutoRun, data = 9, type = REG_NONE False 1
Fn
Module Get Filename process_name = c:\windows\system32\cmd.exe, file_name_orig = C:\Windows\system32\cmd.exe, size = 260 True 1
Fn
Environment Get Environment String name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ True 1
Fn
Environment Get Environment String name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC True 1
Fn
Environment Get Environment String name = PROMPT False 1
Fn
Environment Set Environment String name = PROMPT, value = $P$G True 1
Fn
Environment Get Environment String - True 1
Fn
Data
Environment Get Environment String name = COMSPEC, result_out = C:\Windows\system32\cmd.exe True 1
Fn
Environment Get Environment String name = KEYS False 1
Fn
File Get Info filename = C:\Windows\system32, type = file_attributes True 1
Fn
File Get Info filename = C:\Windows\System32, type = file_attributes True 1
Fn
Environment Set Environment String name = =C:, value = C:\Windows\System32 True 1
Fn
Environment Get Environment String - True 1
Fn
Data
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
System Get Info type = Operating System True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 36 True 1
Fn
Data
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 2 True 1
Fn
Data
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 63 True 1
Fn
Data
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 2 True 1
Fn
Data
Module Get Handle module_name = c:\windows\system32\kernel32.dll, base_address = 0x77010000 True 1
Fn
Module Get Address module_name = c:\windows\system32\kernel32.dll, function = CopyFileExW, address_out = 0x770223d0 True 1
Fn
Module Get Address module_name = c:\windows\system32\kernel32.dll, function = IsDebuggerPresent, address_out = 0x77018290 True 1
Fn
Module Get Address module_name = c:\windows\system32\kernel32.dll, function = SetConsoleInputExeNameW, address_out = 0x770217e0 True 1
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Get Info filename = STD_INPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 2 True 1
Fn
Data
Environment Get Environment String name = PROMPT, result_out = $P$G True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 20 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Get Info filename = STD_INPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Get Info filename = STD_INPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 24 True 1
Fn
Data
Environment Get Environment String name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ True 1
Fn
Environment Get Environment String name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC True 1
Fn
Process Create process_name = C:\Windows\system32\mode.com, os_pid = 0x740, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL True 1
Fn
Environment Set Environment String name = COPYCMD True 1
Fn
Environment Get Environment String - True 1
Fn
Data
Module Load module_name = NTDLL.DLL, base_address = 0x77130000 True 1
Fn
Module Get Address module_name = c:\windows\system32\ntdll.dll, function = NtQueryInformationProcess, address_out = 0x771814a0 True 1
Fn
Process Get Info type = PROCESS_BASIC_INFORMATION True 1
Fn
Memory Read process_name = C:\Windows\system32\mode.com, address = 0x7fffffd6000, size = 896 True 1
Fn
Data
Environment Set Environment String name = =ExitCode, value = 00000000 True 1
Fn
Environment Get Environment String - True 1
Fn
Data
Environment Set Environment String name = =ExitCodeAscii True 1
Fn
Environment Get Environment String - True 1
Fn
Data
File Open filename = STD_OUTPUT_HANDLE True 2
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 2 True 1
Fn
Data
Environment Get Environment String name = PROMPT, result_out = $P$G True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 20 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Get Info filename = STD_INPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Get Info filename = STD_INPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 36 True 1
Fn
Data
Environment Get Environment String name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ True 1
Fn
Environment Get Environment String name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC True 1
Fn
Process Create process_name = C:\Windows\system32\vssadmin.exe, os_pid = 0x768, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL True 1
Fn
Environment Set Environment String name = COPYCMD True 1
Fn
Environment Get Environment String - True 1
Fn
Data
Process Get Info type = PROCESS_BASIC_INFORMATION True 1
Fn
Memory Read process_name = C:\Windows\system32\vssadmin.exe, address = 0x7fffffd9000, size = 896 True 1
Fn
Data
Environment Set Environment String name = =ExitCode, value = 00000002 True 1
Fn
Environment Get Environment String - True 1
Fn
Data
Environment Set Environment String name = =ExitCodeAscii True 1
Fn
Environment Get Environment String - True 1
Fn
Data
File Open filename = STD_OUTPUT_HANDLE True 2
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 2 True 1
Fn
Data
Environment Get Environment String name = PROMPT, result_out = $P$G True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 20 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Get Info filename = STD_INPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Get Info filename = STD_INPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 5 True 1
Fn
Data
Process #10: mode.com
0 0
»
Information Value
ID #10
File Name c:\windows\system32\mode.com
Command Line mode con cp select=1251
Initial Working Directory C:\Windows\system32\
Monitor Start Time: 00:02:36, Reason: Child Process
Unmonitor End Time: 00:02:37, Reason: Self Terminated
Monitor Duration 00:00:01
Remark No high level activity detected in monitored regions
OS Process Information
»
Information Value
PID 0x740
Parent PID 0x710 (c:\windows\system32\cmd.exe)
Is Created or Modified Executable False
Integrity Level Medium
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege
Thread IDs
0x 744
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory rw True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000020000 0x00020000 0x0002ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000030000 0x00030000 0x00033fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000040000 0x00040000 0x00040fff Pagefile Backed Memory r True False False -
locale.nls 0x00050000 0x000b6fff Memory Mapped File r False False False -
private_0x00000000000c0000 0x000c0000 0x000c0fff Private Memory rw True False False -
private_0x00000000000d0000 0x000d0000 0x000d0fff Private Memory rw True False False -
c_1251.nls 0x000e0000 0x000f0fff Memory Mapped File r False False False -
pagefile_0x0000000000100000 0x00100000 0x00106fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000110000 0x00110000 0x00111fff Pagefile Backed Memory rw True False False -
ulib.dll.mui 0x00120000 0x00157fff Memory Mapped File rw False False False -
private_0x00000000001b0000 0x001b0000 0x001bffff Private Memory rw True False False -
private_0x00000000001d0000 0x001d0000 0x0024ffff Private Memory rw True False False -
private_0x0000000000250000 0x00250000 0x0034ffff Private Memory rw True False False -
private_0x0000000000380000 0x00380000 0x0047ffff Private Memory rw True False False -
pagefile_0x0000000000480000 0x00480000 0x00607fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000610000 0x00610000 0x00790fff Pagefile Backed Memory r True False False -
pagefile_0x00000000007a0000 0x007a0000 0x01b9ffff Pagefile Backed Memory r True False False -
user32.dll 0x76f10000 0x77009fff Memory Mapped File rwx False False False -
kernel32.dll 0x77010000 0x7712efff Memory Mapped File rwx False False False -
ntdll.dll 0x77130000 0x772d8fff Memory Mapped File rwx False False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory r True False False -
pagefile_0x000000007efe0000 0x7efe0000 0x7f0dffff Pagefile Backed Memory r True False False -
private_0x000000007f0e0000 0x7f0e0000 0x7ffdffff Private Memory r True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
mode.com 0xff240000 0xff24bfff Memory Mapped File rwx False False False -
ureg.dll 0x7fef78a0000 0x7fef78abfff Memory Mapped File rwx False False False -
ulib.dll 0x7fef78b0000 0x7fef78d7fff Memory Mapped File rwx False False False -
uxtheme.dll 0x7fefb9d0000 0x7fefba25fff Memory Mapped File rwx False False False -
kernelbase.dll 0x7fefd150000 0x7fefd1bafff Memory Mapped File rwx False False False -
advapi32.dll 0x7fefd450000 0x7fefd52afff Memory Mapped File rwx False False False -
msctf.dll 0x7fefd530000 0x7fefd638fff Memory Mapped File rwx False False False -
msvcrt.dll 0x7fefd660000 0x7fefd6fefff Memory Mapped File rwx False False False -
imm32.dll 0x7fefd830000 0x7fefd85dfff Memory Mapped File rwx False False False -
rpcrt4.dll 0x7fefd860000 0x7fefd98cfff Memory Mapped File rwx False False False -
usp10.dll 0x7fefefd0000 0x7feff098fff Memory Mapped File rwx False False False -
gdi32.dll 0x7feff0a0000 0x7feff106fff Memory Mapped File rwx False False False -
lpk.dll 0x7feff200000 0x7feff20dfff Memory Mapped File rwx False False False -
sechost.dll 0x7feff390000 0x7feff3aefff Memory Mapped File rwx False False False -
apisetschema.dll 0x7feff450000 0x7feff450fff Memory Mapped File rwx False False False -
pagefile_0x000007fffffb0000 0x7fffffb0000 0x7fffffd2fff Pagefile Backed Memory r True False False -
private_0x000007fffffd6000 0x7fffffd6000 0x7fffffd6fff Private Memory rw True False False -
private_0x000007fffffde000 0x7fffffde000 0x7fffffdffff Private Memory rw True False False -
Process #11: vssadmin.exe
0 0
»
Information Value
ID #11
File Name c:\windows\system32\vssadmin.exe
Command Line vssadmin delete shadows /all /quiet
Initial Working Directory C:\Windows\system32\
Monitor Start Time: 00:02:37, Reason: Child Process
Unmonitor End Time: 00:02:42, Reason: Self Terminated
Monitor Duration 00:00:05
Remark No high level activity detected in monitored regions
OS Process Information
»
Information Value
PID 0x768
Parent PID 0x710 (c:\windows\system32\cmd.exe)
Is Created or Modified Executable False
Integrity Level Medium
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege
Thread IDs
0x 76C
0x 77C
0x 788
0x 78C
0x 790
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory rw True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000020000 0x00020000 0x0002ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000030000 0x00030000 0x00033fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000040000 0x00040000 0x00040fff Pagefile Backed Memory r True False False -
locale.nls 0x00050000 0x000b6fff Memory Mapped File r False False False -
private_0x00000000000c0000 0x000c0000 0x001bffff Private Memory rw True False False -
pagefile_0x00000000001c0000 0x001c0000 0x001c6fff Pagefile Backed Memory r True False False -
private_0x00000000001d0000 0x001d0000 0x0024ffff Private Memory rw True False False -
pagefile_0x0000000000250000 0x00250000 0x00251fff Pagefile Backed Memory rw True False False -
vssadmin.exe.mui 0x00260000 0x0026cfff Memory Mapped File rw False False False -
private_0x0000000000270000 0x00270000 0x00270fff Private Memory rw True False False -
private_0x0000000000280000 0x00280000 0x00280fff Private Memory rw True False False -
private_0x0000000000290000 0x00290000 0x0030ffff Private Memory rw True False False -
c_1251.nls 0x00310000 0x00320fff Memory Mapped File r False False False -
pagefile_0x0000000000330000 0x00330000 0x00330fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000340000 0x00340000 0x00340fff Pagefile Backed Memory r True False False -
private_0x00000000003b0000 0x003b0000 0x003bffff Private Memory rw True False False -
private_0x0000000000400000 0x00400000 0x004fffff Private Memory rw True False False -
pagefile_0x0000000000500000 0x00500000 0x00687fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000690000 0x00690000 0x00810fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000820000 0x00820000 0x01c1ffff Pagefile Backed Memory r True False False -
private_0x0000000001de0000 0x01de0000 0x01e5ffff Private Memory rw True False False -
sortdefault.nls 0x01e60000 0x0212efff Memory Mapped File r False False False -
user32.dll 0x76f10000 0x77009fff Memory Mapped File rwx False False False -
kernel32.dll 0x77010000 0x7712efff Memory Mapped File rwx False False False -
ntdll.dll 0x77130000 0x772d8fff Memory Mapped File rwx False False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory r True False False -
pagefile_0x000000007efe0000 0x7efe0000 0x7f0dffff Pagefile Backed Memory r True False False -
private_0x000000007f0e0000 0x7f0e0000 0x7ffdffff Private Memory r True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
vssadmin.exe 0xff050000 0xff07cfff Memory Mapped File rwx False False False -
vsstrace.dll 0x7fef55b0000 0x7fef55c6fff Memory Mapped File rwx False False False -
vssapi.dll 0x7fef55d0000 0x7fef577ffff Memory Mapped File rwx False False False -
atl.dll 0x7fefab30000 0x7fefab48fff Memory Mapped File rwx False False False -
rsaenh.dll 0x7fefc690000 0x7fefc6d6fff Memory Mapped File rwx False False False -
cryptsp.dll 0x7fefc990000 0x7fefc9a6fff Memory Mapped File rwx False False False -
cryptbase.dll 0x7fefcfb0000 0x7fefcfbefff Memory Mapped File rwx False False False -
rpcrtremote.dll 0x7fefd060000 0x7fefd073fff Memory Mapped File rwx False False False -
kernelbase.dll 0x7fefd150000 0x7fefd1bafff Memory Mapped File rwx False False False -
advapi32.dll 0x7fefd450000 0x7fefd52afff Memory Mapped File rwx False False False -
msctf.dll 0x7fefd530000 0x7fefd638fff Memory Mapped File rwx False False False -
msvcrt.dll 0x7fefd660000 0x7fefd6fefff Memory Mapped File rwx False False False -
imm32.dll 0x7fefd830000 0x7fefd85dfff Memory Mapped File rwx False False False -
rpcrt4.dll 0x7fefd860000 0x7fefd98cfff Memory Mapped File rwx False False False -
ole32.dll 0x7fefe7c0000 0x7fefe9c2fff Memory Mapped File rwx False False False -
oleaut32.dll 0x7fefee10000 0x7fefeee6fff Memory Mapped File rwx False False False -
usp10.dll 0x7fefefd0000 0x7feff098fff Memory Mapped File rwx False False False -
gdi32.dll 0x7feff0a0000 0x7feff106fff Memory Mapped File rwx False False False -
clbcatq.dll 0x7feff110000 0x7feff1a8fff Memory Mapped File rwx False False False -
lpk.dll 0x7feff200000 0x7feff20dfff Memory Mapped File rwx False False False -
sechost.dll 0x7feff390000 0x7feff3aefff Memory Mapped File rwx False False False -
apisetschema.dll 0x7feff450000 0x7feff450fff Memory Mapped File rwx False False False -
pagefile_0x000007fffffb0000 0x7fffffb0000 0x7fffffd2fff Pagefile Backed Memory r True False False -
private_0x000007fffffd9000 0x7fffffd9000 0x7fffffd9fff Private Memory rw True False False -
private_0x000007fffffda000 0x7fffffda000 0x7fffffdbfff Private Memory rw True False False -
private_0x000007fffffdc000 0x7fffffdc000 0x7fffffddfff Private Memory rw True False False -
private_0x000007fffffde000 0x7fffffde000 0x7fffffdffff Private Memory rw True False False -
Process #12: 1.exe
3486 0
»
Information Value
ID #12
File Name c:\programdata\microsoft\windows\start menu\programs\startup\1.exe
Command Line "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe" -a
Initial Working Directory C:\Windows\system32\
Monitor Start Time: 00:03:02, Reason: Child Process
Unmonitor End Time: 00:03:29, Reason: Terminated by Timeout
Monitor Duration 00:00:27
OS Process Information
»
Information Value
PID 0x734
Parent PID 0x4f0 (c:\programdata\microsoft\windows\start menu\programs\startup\1.exe)
Is Created or Modified Executable True
Integrity Level High (Elevated)
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x 71C
0x 18C
0x 364
0x 598
0x 5C4
0x 38C
0x 67C
0x 5D0
0x 588
0x 704
0x 6D8
0x 558
0x 688
0x 5B4
0x 584
0x 720
0x 394
0x 59C
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory rw True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000020000 0x00020000 0x00020fff Pagefile Backed Memory r True False False -
private_0x0000000000030000 0x00030000 0x00031fff Private Memory rw True False False -
private_0x0000000000030000 0x00030000 0x00030fff Private Memory rw True False False -
apisetschema.dll 0x00040000 0x00040fff Memory Mapped File rwx False False False -
private_0x0000000000050000 0x00050000 0x0008ffff Private Memory rw True False False -
private_0x0000000000090000 0x00090000 0x0018ffff Private Memory rw True False False -
pagefile_0x0000000000190000 0x00190000 0x00193fff Pagefile Backed Memory r True False False -
locale.nls 0x001a0000 0x00206fff Memory Mapped File r False False False -
private_0x0000000000210000 0x00210000 0x00210fff Private Memory rw True False False -
private_0x0000000000220000 0x00220000 0x00220fff Private Memory rw True False False -
private_0x0000000000230000 0x00230000 0x0023ffff Private Memory rw True False False -
pagefile_0x0000000000230000 0x00230000 0x0023bfff Pagefile Backed Memory rw True False False -
private_0x0000000000230000 0x00230000 0x00230fff Private Memory rw True False False -
pagefile_0x0000000000240000 0x00240000 0x0024bfff Pagefile Backed Memory rw True False False -
private_0x0000000000240000 0x00240000 0x00240fff Private Memory rw True False False -
private_0x0000000000240000 0x00240000 0x0024ffff Private Memory rw True False False -
pagefile_0x0000000000240000 0x00240000 0x00243fff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000240000 0x00240000 0x00246fff Pagefile Backed Memory r True False False -
private_0x0000000000250000 0x00250000 0x0025ffff Private Memory rw True False False -
private_0x0000000000250000 0x00250000 0x00250fff Private Memory rw True False False -
private_0x0000000000260000 0x00260000 0x0026ffff Private Memory rw True False False -
private_0x0000000000270000 0x00270000 0x002a0fff Private Memory rw True False False -
private_0x0000000000270000 0x00270000 0x002affff Private Memory rw True False False -
private_0x00000000002b0000 0x002b0000 0x002b0fff Private Memory rwx True False False -
pagefile_0x00000000002c0000 0x002c0000 0x002c3fff Pagefile Backed Memory rw True False False -
private_0x00000000002c0000 0x002c0000 0x002fffff Private Memory rw True False False -
private_0x0000000000300000 0x00300000 0x00300fff Private Memory rwx True False False -
private_0x0000000000310000 0x00310000 0x0038ffff Private Memory rw True False False -
private_0x0000000000390000 0x00390000 0x003cffff Private Memory rw True False False -
pagefile_0x00000000003d0000 0x003d0000 0x003d3fff Pagefile Backed Memory rw True False False -
pagefile_0x00000000003d0000 0x003d0000 0x003d1fff Pagefile Backed Memory rw True False False -
private_0x00000000003e0000 0x003e0000 0x003effff Private Memory rw True False False -
pagefile_0x00000000003f0000 0x003f0000 0x003f3fff Pagefile Backed Memory rw True False False -
1.exe 0x00400000 0x00887fff Memory Mapped File rwx True True False
...
private_0x0000000000890000 0x00890000 0x009affff Private Memory rw True False False -
private_0x0000000000890000 0x00890000 0x0098ffff Private Memory rw True False False -
private_0x0000000000990000 0x00990000 0x009cffff Private Memory rw True False False -
private_0x00000000009e0000 0x009e0000 0x009effff Private Memory rw True False False -
private_0x0000000000a00000 0x00a00000 0x00afffff Private Memory rw True False False -
pagefile_0x0000000000b00000 0x00b00000 0x00c87fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000c90000 0x00c90000 0x00e10fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000e20000 0x00e20000 0x0221ffff Pagefile Backed Memory r True False False -
pagefile_0x0000000002220000 0x02220000 0x0262ffff Pagefile Backed Memory rw True False False -
sortdefault.nls 0x02220000 0x024eefff Memory Mapped File r False False False -
1.exe 0x024f0000 0x026a4fff Memory Mapped File r True True False
...
private_0x00000000024f0000 0x024f0000 0x025f0fff Private Memory rw True False False -
private_0x00000000024f0000 0x024f0000 0x025effff Private Memory rw True False False -
private_0x00000000025f0000 0x025f0000 0x026effff Private Memory rw True False False -
pagefile_0x0000000002630000 0x02630000 0x02a3ffff Pagefile Backed Memory rw True False False -
private_0x00000000026f0000 0x026f0000 0x027effff Private Memory rw True False False -
private_0x00000000027f0000 0x027f0000 0x0282ffff Private Memory rw True False False -
private_0x0000000002830000 0x02830000 0x0292ffff Private Memory rw True False False -
private_0x0000000002930000 0x02930000 0x0296ffff Private Memory rw True False False -
private_0x0000000002970000 0x02970000 0x02a6ffff Private Memory rw True False False -
pagefile_0x0000000002a70000 0x02a70000 0x02e62fff Pagefile Backed Memory r True False False -
private_0x0000000002e70000 0x02e70000 0x02eaffff Private Memory rw True False False -
private_0x0000000002eb0000 0x02eb0000 0x02faffff Private Memory rw True False False -
private_0x0000000002fb0000 0x02fb0000 0x02feffff Private Memory rw True False False -
private_0x0000000002ff0000 0x02ff0000 0x030effff Private Memory rw True False False -
private_0x00000000030f0000 0x030f0000 0x0312ffff Private Memory rw True False False -
private_0x0000000003130000 0x03130000 0x0322ffff Private Memory rw True False False -
private_0x0000000003230000 0x03230000 0x0326ffff Private Memory rw True False False -
private_0x0000000003270000 0x03270000 0x0336ffff Private Memory rw True False False -
private_0x0000000003370000 0x03370000 0x033affff Private Memory rw True False False -
private_0x00000000033b0000 0x033b0000 0x034affff Private Memory rw True False False -
private_0x00000000034b0000 0x034b0000 0x034effff Private Memory rw True False False -
private_0x00000000034f0000 0x034f0000 0x035effff Private Memory rw True False False -
private_0x00000000035f0000 0x035f0000 0x0362ffff Private Memory rw True False False -
private_0x0000000003630000 0x03630000 0x0372ffff Private Memory rw True False False -
private_0x0000000003730000 0x03730000 0x0376ffff Private Memory rw True False False -
private_0x0000000003770000 0x03770000 0x0386ffff Private Memory rw True False False -
private_0x0000000003870000 0x03870000 0x038affff Private Memory rw True False False -
private_0x00000000038b0000 0x038b0000 0x039affff Private Memory rw True False False -
private_0x00000000039b0000 0x039b0000 0x039effff Private Memory rw True False False -
private_0x00000000039f0000 0x039f0000 0x03aeffff Private Memory rw True False False -
private_0x0000000003af0000 0x03af0000 0x03bf0fff Private Memory rw True False False -
private_0x0000000003c00000 0x03c00000 0x03d00fff Private Memory rw True False False -
private_0x0000000003d10000 0x03d10000 0x03e10fff Private Memory rw True False False -
private_0x0000000003e20000 0x03e20000 0x03f1ffff Private Memory rw True False False -
private_0x0000000003f20000 0x03f20000 0x04020fff Private Memory rw True False False -
private_0x0000000004030000 0x04030000 0x04130fff Private Memory rw True False False -
private_0x0000000004140000 0x04140000 0x04240fff Private Memory rw True False False -
private_0x0000000004250000 0x04250000 0x04350fff Private Memory rw True False False -
private_0x0000000004360000 0x04360000 0x04460fff Private Memory rw True False False -
private_0x0000000004470000 0x04470000 0x0466ffff Private Memory rw True False False -
comctl32.dll 0x73650000 0x736d3fff Memory Mapped File rwx False False False -
wow64cpu.dll 0x73880000 0x73887fff Memory Mapped File rwx False False False -
wow64win.dll 0x73890000 0x738ebfff Memory Mapped File rwx False False False -
wow64.dll 0x738f0000 0x7392efff Memory Mapped File rwx False False False -
browcli.dll 0x74c30000 0x74c3cfff Memory Mapped File rwx False False False -
netutils.dll 0x74c40000 0x74c48fff Memory Mapped File rwx False False False -
cscapi.dll 0x74c50000 0x74c5afff Memory Mapped File rwx False False False -
wkscli.dll 0x74c60000 0x74c6efff Memory Mapped File rwx False False False -
davhlpr.dll 0x74c70000 0x74c77fff Memory Mapped File rwx False False False -
davclnt.dll 0x74c80000 0x74c96fff Memory Mapped File rwx False False False -
ntlanman.dll 0x74ca0000 0x74cb3fff Memory Mapped File rwx False False False -
winsta.dll 0x74cc0000 0x74ce8fff Memory Mapped File rwx False False False -
drprov.dll 0x74cf0000 0x74cf7fff Memory Mapped File rwx False False False -
mpr.dll 0x74d00000 0x74d11fff Memory Mapped File rwx False False False -
winmm.dll 0x74e10000 0x74e41fff Memory Mapped File rwx False False False -
cryptbase.dll 0x74e60000 0x74e6bfff Memory Mapped File rwx False False False -
sspicli.dll 0x74e70000 0x74ecffff Memory Mapped File rwx False False False -
kernelbase.dll 0x74ed0000 0x74f15fff Memory Mapped File rwx False False False -
sechost.dll 0x751d0000 0x751e8fff Memory Mapped File rwx False False False -
ws2_32.dll 0x751f0000 0x75224fff Memory Mapped File rwx False False False -
usp10.dll 0x75250000 0x752ecfff Memory Mapped File rwx False False False -
shell32.dll 0x75300000 0x75f49fff Memory Mapped File rwx False False False -
imagehlp.dll 0x75f50000 0x75f79fff Memory Mapped File rwx False False False -
rpcrt4.dll 0x75f80000 0x7606ffff Memory Mapped File rwx False False False -
kernel32.dll 0x760a0000 0x761affff Memory Mapped File rwx False False False -
msvcrt.dll 0x761b0000 0x7625bfff Memory Mapped File rwx False False False -
nsi.dll 0x766b0000 0x766b5fff Memory Mapped File rwx False False False -
imm32.dll 0x766c0000 0x7671ffff Memory Mapped File rwx False False False -
advapi32.dll 0x76720000 0x767bffff Memory Mapped File rwx False False False -
shlwapi.dll 0x767c0000 0x76816fff Memory Mapped File rwx False False False -
lpk.dll 0x769d0000 0x769d9fff Memory Mapped File rwx False False False -
gdi32.dll 0x76a70000 0x76afffff Memory Mapped File rwx False False False -
user32.dll 0x76bb0000 0x76caffff Memory Mapped File rwx False False False -
msctf.dll 0x76df0000 0x76ebbfff Memory Mapped File rwx False False False -
private_0x0000000076f10000 0x76f10000 0x77009fff Private Memory rwx True False False -
private_0x0000000077010000 0x77010000 0x7712efff Private Memory rwx True False False -
ntdll.dll 0x77130000 0x772d8fff Memory Mapped File rwx False False False -
ntdll.dll 0x77310000 0x7748ffff Memory Mapped File rwx False False False -
private_0x000000007ef86000 0x7ef86000 0x7ef88fff Private Memory rw True False False -
private_0x000000007ef89000 0x7ef89000 0x7ef8bfff Private Memory rw True False False -
private_0x000000007ef8c000 0x7ef8c000 0x7ef8efff Private Memory rw True False False -
private_0x000000007ef8f000 0x7ef8f000 0x7ef91fff Private Memory rw True False False -
private_0x000000007ef92000 0x7ef92000 0x7ef94fff Private Memory rw True False False -
private_0x000000007ef95000 0x7ef95000 0x7ef97fff Private Memory rw True False False -
private_0x000000007ef98000 0x7ef98000 0x7ef9afff Private Memory rw True False False -
private_0x000000007ef9b000 0x7ef9b000 0x7ef9dfff Private Memory rw True False False -
private_0x000000007ef9e000 0x7ef9e000 0x7efa0fff Private Memory rw True False False -
private_0x000000007efa1000 0x7efa1000 0x7efa3fff Private Memory rw True False False -
private_0x000000007efa4000 0x7efa4000 0x7efa6fff Private Memory rw True False False -
private_0x000000007efa7000 0x7efa7000 0x7efa9fff Private Memory rw True False False -
private_0x000000007efaa000 0x7efaa000 0x7efacfff Private Memory rw True False False -
private_0x000000007efad000 0x7efad000 0x7efaffff Private Memory rw True False False -
pagefile_0x000000007efb0000 0x7efb0000 0x7efd2fff Pagefile Backed Memory r True False False -
private_0x000000007efd5000 0x7efd5000 0x7efd7fff Private Memory rw True False False -
private_0x000000007efd8000 0x7efd8000 0x7efdafff Private Memory rw True False False -
private_0x000000007efdb000 0x7efdb000 0x7efddfff Private Memory rw True False False -
private_0x000000007efde000 0x7efde000 0x7efdefff Private Memory rw True False False -
private_0x000000007efdf000 0x7efdf000 0x7efdffff Private Memory rw True False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory r True False False -
pagefile_0x000000007efe0000 0x7efe0000 0x7f0dffff Pagefile Backed Memory r True False False -
private_0x000000007f0e0000 0x7f0e0000 0x7ffdffff Private Memory r True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
private_0x000000007fff0000 0x7fff0000 0x7fffffeffff Private Memory r True False False -
For performance reasons, the remaining 6 entries are omitted.
The remaining entries can be found in flog.txt.
Hook Information
»
Type Installer Target Size Information Actions
Code 1.exe:+0x111060 ntdll.dll:DbgBreakPoint+0x0 1 bytes -
...
Threads
Thread 0x71c
130 0
»
Category Operation Information Success Count Logfile
Module Load module_name = USER32.dll, base_address = 0x76bb0000 True 1
Fn
Module Load module_name = ADVAPI32.dll, base_address = 0x76720000 True 1
Fn
Module Load module_name = NTDLL.dll, base_address = 0x77310000 True 1
Fn
System Get Time type = Local Time, time = 2019-01-23 21:46:31 (Local Time) True 1
Fn
File Create filename = \\.\SICE, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = \\.\SIWVID, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = \\.\NTICE, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
System Get Info type = Operating System True 1
Fn
Registry Open Key reg_name = HKEY_CURRENT_USER\Software\Wine False 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__ False 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = GetNativeSystemInfo, address_out = 0x760c10b5 True 1
Fn
System Get Info type = Hardware Information True 1
Fn
System Get Info type = Operating System True 1
Fn
Module Load module_name = winmm.dll, base_address = 0x74e10000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\winmm.dll, function = timeGetTime, address_out = 0x74e126e0 True 1
Fn
System Get Info type = System Directory, result_out = C:\Windows\system32 True 1
Fn
Debug Print process_name = c:\programdata\microsoft\windows\start menu\programs\startup\1.exe, type = DEBUG_STRING, text = %s------------------------------------------------ --- Themida Professional --- --- (c)2012 Oreans Technologies --- ------------------------------------------------ True 1
Fn
Module Load module_name = NTDLL, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtOpenThread, address_out = 0x77331128 True 1
Fn
Module Load module_name = winmm.dll, base_address = 0x74e10000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\winmm.dll, function = timeGetTime, address_out = 0x74e126e0 True 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000 True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000, value_name = DriverDesc, data = 83 True 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\Hardware\description\System True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Hardware\description\System, value_name = SystemBiosVersion, data = 80 True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Hardware\description\System, value_name = VideoBiosVersion, data = 80 False 1
Fn
Window Find class_name = OLLYDBG False 1
Fn
Window Find class_name = GBDYLLO False 1
Fn
Window Find class_name = pediy06 False 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x7732fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
System Get Info type = System Directory, result_out = C:\Windows\system32 True 1
Fn
File Create filename = C:\Windows\system32\ntdll.dll, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_SYSTEM, share_mode = FILE_SHARE_READ True 1
Fn
File Read filename = C:\Windows\system32\ntdll.dll, size = 32, size_out = 32 True 1
Fn
Data
Debug Check for Presence c:\programdata\microsoft\windows\start menu\programs\startup\1.exe True 1
Fn
System Get Info type = Operating System True 1
Fn
Debug Check for Presence c:\programdata\microsoft\windows\start menu\programs\startup\1.exe True 1
Fn
Debug Hide c:\programdata\microsoft\windows\start menu\programs\startup\1.exe True 1
Fn
Debug Check for Presence c:\programdata\microsoft\windows\start menu\programs\startup\1.exe True 1
Fn
Window Find class_name = FilemonClass False 1
Fn
Window Find window_name = File Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Window Find class_name = PROCMON_WINDOW_CLASS False 1
Fn
Window Find window_name = Process Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x7732fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Window Find class_name = RegmonClass False 1
Fn
Window Find window_name = Registry Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Window Find class_name = 18467-41 False 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x7732fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = RtlAllocateHeap, address_out = 0x7733e026 True 1
Fn
System Get Info type = Operating System True 1
Fn
Module Load module_name = KERNEL32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Filename process_name = c:\programdata\microsoft\windows\start menu\programs\startup\1.exe, file_name_orig = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 512 True 1
Fn
File Create filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_ARCHIVE, share_mode = FILE_SHARE_READ True 1
Fn
Module Create Mapping module_name = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, protection = PAGE_READONLY, maximum_size = 0 True 1
Fn
Module Map C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, process_name = c:\programdata\microsoft\windows\start menu\programs\startup\1.exe, desired_access = FILE_MAP_READ True 1
Fn
Module Load module_name = imagehlp.dll, base_address = 0x75f50000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\imagehlp.dll, function = CheckSumMappedFile, address_out = 0x75f58303 True 1
Fn
Module Unmap process_name = c:\programdata\microsoft\windows\start menu\programs\startup\1.exe True 1
Fn
System Get Time type = Local Time, time = 2019-01-23 21:46:41 (Local Time) True 1
Fn
Debug Check for Presence c:\programdata\microsoft\windows\start menu\programs\startup\1.exe True 1
Fn
Window Find class_name = FilemonClass False 1
Fn
Window Find window_name = File Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Window Find class_name = PROCMON_WINDOW_CLASS False 1
Fn
Window Find window_name = Process Monitor - Sysinternals: www.sysinternals.com False 1
Fn
Module Get Handle module_name = c:\windows\syswow64\ntdll.dll, base_address = 0x77310000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x7732fda0 True 1
Fn
System Get Info type = SYSTEM_MODULE_INFORMATION True 1
Fn
System Get Time type = Ticks, time = 80012 True 3
Fn
System Get Info type = Operating System True 1
Fn
Mutex Open mutex_name = Global\syncronize_6LSDY1A, desired_access = SYNCHRONIZE True 1
Fn
Mutex Open mutex_name = Global\syncronize_6LSDY1U, desired_access = SYNCHRONIZE True 1
Fn
System Get Info type = Operating System True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Module Get Filename process_name = c:\programdata\microsoft\windows\start menu\programs\startup\1.exe, file_name_orig = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 32767 True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
File Create filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ True 1
Fn
File Create filename = C:\Windows\System32\1.exe, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 1048576, size_out = 1048576 True 1
Fn
Data
File Write filename = C:\Windows\System32\1.exe, size = 1048576 True 1
Fn
Data
File Read filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 1048576, size_out = 738816 True 1
Fn
Data
File Write filename = C:\Windows\System32\1.exe, size = 738816 True 1
Fn
Data
File Read filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 1048576, size_out = 0 True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run True 1
Fn
Registry Write Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run, value_name = 1.exe, data = C:\Windows\System32\1.exe, size = 50, type = REG_SZ True 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, value_name = Startup, data = 83, type = REG_NONE False 1
Fn
Registry Open Key reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, value_name = Startup, data = %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup, type = REG_EXPAND_SZ True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
File Create filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ True 1
Fn
File Create filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 1048576, size_out = 1048576 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 1048576 True 1
Fn
Data
File Read filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 1048576, size_out = 738816 True 1
Fn
Data
File Write filename = C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 738816 True 1
Fn
Data
File Read filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, size = 1048576, size_out = 0 True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, value_name = Common Startup, data = %ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup, type = REG_EXPAND_SZ True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
File Create filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ True 1
Fn
File Create filename = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe, desired_access = GENERIC_WRITE False 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
File Create Pipe pipe_name = Anonymous read pipe, size = 0 True 1
Fn
File Create Pipe pipe_name = Anonymous read pipe, size = 0 True 1
Fn
Process Create process_name = C:\Windows\system32\cmd.exe, os_pid = 0x370, startup_flags = STARTF_USESHOWWINDOW, STARTF_USESTDHANDLES, show_window = SW_HIDE True 1
Fn
File Write size = 65 True 1
Fn
Data
Thread 0x364
52 0
»
Category Operation Information Success Count Logfile
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Service Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Service Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System Sleep duration = 500 milliseconds (0.500 seconds) True 1
Fn
Thread 0x5c4
1 0
»
Category Operation Information Success Count Logfile
System Get Computer Name result_out = XDUWTFONO True 1
Fn
Thread 0x38c
47 0
»
Category Operation Information Success Count Logfile
System Get Time type = Ticks, time = 81541 True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Get Time type = Ticks, time = 81806 True 1
Fn
System Get Time type = Ticks, time = 81978 True 1
Fn
System Get Time type = Ticks, time = 82196 True 1
Fn
System Get Time type = Ticks, time = 82321 True 1
Fn
System Get Time type = Ticks, time = 82477 True 1
Fn
System Get Time type = Ticks, time = 82586 True 2
Fn
System Get Time type = Ticks, time = 82727 True 1
Fn
System Get Time type = Ticks, time = 82883 True 1
Fn
System Get Time type = Ticks, time = 83008 True 1
Fn
System Get Time type = Ticks, time = 83257 True 1
Fn
System Get Time type = Ticks, time = 83476 True 1
Fn
System Get Time type = Ticks, time = 83647 True 2
Fn
System Get Time type = Ticks, time = 83959 True 1
Fn
System Get Time type = Ticks, time = 84209 True 1
Fn
System Get Time type = Ticks, time = 84755 True 2
Fn
System Get Time type = Ticks, time = 84926 True 1
Fn
System Get Time type = Ticks, time = 85192 True 1
Fn
System Get Time type = Ticks, time = 85800 True 2
Fn
System Get Time type = Ticks, time = 86299 True 1
Fn
System Get Time type = Ticks, time = 86845 True 2
Fn
System Get Time type = Ticks, time = 87391 True 1
Fn
System Get Time type = Ticks, time = 87844 True 1
Fn
System Get Time type = Ticks, time = 88234 True 2
Fn
System Get Time type = Ticks, time = 88546 True 1
Fn
System Get Time type = Ticks, time = 88873 True 1
Fn
System Get Time type = Ticks, time = 89092 True 1
Fn
System Get Time type = Ticks, time = 89497 True 2
Fn
System Get Time type = Ticks, time = 89653 True 1
Fn
System Get Time type = Ticks, time = 90262 True 1
Fn
System Get Time type = Ticks, time = 92399 True 2
Fn
System Get Time type = Ticks, time = 93132 True 1
Fn
System Get Time type = Ticks, time = 93366 True 1
Fn
System Get Time type = Ticks, time = 93709 True 2
Fn
System Get Time type = Ticks, time = 93834 True 1
Fn
System Get Time type = Ticks, time = 94209 True 1
Fn
Thread 0x67c
47 0
»
Category Operation Information Success Count Logfile
System Get Time type = Ticks, time = 81557 True 1
Fn
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Get Time type = Ticks, time = 81806 True 1
Fn
System Get Time type = Ticks, time = 81978 True 1
Fn
System Get Time type = Ticks, time = 82196 True 1
Fn
System Get Time type = Ticks, time = 82321 True 1
Fn
System Get Time type = Ticks, time = 82477 True 1
Fn
System Get Time type = Ticks, time = 82586 True 2
Fn
System Get Time type = Ticks, time = 82727 True 1
Fn
System Get Time type = Ticks, time = 82883 True 1
Fn
System Get Time type = Ticks, time = 83008 True 1
Fn
System Get Time type = Ticks, time = 83257 True 1
Fn
System Get Time type = Ticks, time = 83476 True 1
Fn
System Get Time type = Ticks, time = 83647 True 2
Fn
System Get Time type = Ticks, time = 83959 True 1
Fn
System Get Time type = Ticks, time = 84209 True 1
Fn
System Get Time type = Ticks, time = 84755 True 2
Fn
System Get Time type = Ticks, time = 84926 True 1
Fn
System Get Time type = Ticks, time = 85192 True 1
Fn
System Get Time type = Ticks, time = 85800 True 2
Fn
System Get Time type = Ticks, time = 86299 True 1
Fn
System Get Time type = Ticks, time = 86845 True 2
Fn
System Get Time type = Ticks, time = 87391 True 1
Fn
System Get Time type = Ticks, time = 87844 True 1
Fn
System Get Time type = Ticks, time = 88234 True 2
Fn
System Get Time type = Ticks, time = 88546 True 1
Fn
System Get Time type = Ticks, time = 88873 True 1
Fn
System Get Time type = Ticks, time = 89092 True 1
Fn
System Get Time type = Ticks, time = 89497 True 2
Fn
System Get Time type = Ticks, time = 89653 True 1
Fn
System Get Time type = Ticks, time = 90262 True 1
Fn
System Get Time type = Ticks, time = 92399 True 2
Fn
System Get Time type = Ticks, time = 93132 True 1
Fn
System Get Time type = Ticks, time = 93366 True 1
Fn
System Get Time type = Ticks, time = 93709 True 2
Fn
System Get Time type = Ticks, time = 93834 True 1
Fn
System Get Time type = Ticks, time = 94209 True 1
Fn
Thread 0x5d0
691 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 1
Fn
File Create filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, type = size, size_out = 129 True 1
Fn
File Get Info filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, type = file_attributes True 1
Fn
File Get Info filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes True 1
Fn
File Create filename = C:\Boot\BCD.LOG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 2
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, type = size, size_out = 791686 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, type = size, size_out = 27045 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml, type = size, size_out = 89600 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml, type = size, size_out = 3161 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml, type = size, size_out = 738 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml, type = size, size_out = 591 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG, size = 1048560, size_out = 31975 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 31984 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, type = size, size_out = 21812 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, size = 1048560, size_out = 21812 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 21824 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF, type = size, size_out = 2527 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF, size = 1048560, size_out = 2527 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE.id-9C354B42.[bestdecoding@cock.li].best, size = 2528 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG, type = size, size_out = 19525 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG, size = 1048560, size_out = 19525 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 19536 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF, type = size, size_out = 1737 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF, size = 1048560, size_out = 1737 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1744 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG, type = size, size_out = 33479 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG, size = 1048560, size_out = 33479 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 33488 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF, type = size, size_out = 1675 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF, size = 1048560, size_out = 1675 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, size = 1680 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF, type = size, size_out = 4991 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF, size = 1048560, size_out = 4991 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 4992 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF, type = size, size_out = 2668 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF, size = 1048560, size_out = 2668 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 2672 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG, type = size, size_out = 42453 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG, size = 1048560, size_out = 42453 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 42464 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM, type = size, size_out = 109718 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM, size = 1048560, size_out = 109718 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 109728 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM, type = size, size_out = 72031 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM, size = 1048560, size_out = 72031 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 72032 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM, type = size, size_out = 944994 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM, size = 1048560, size_out = 944994 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 945008 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM True 1
Fn
File Create filename = C:\Program Files\Common Files\System\msadc\adcjavas.inc, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\System\msadc\adcjavas.inc, type = size, size_out = 630 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\System\msadc\adcjavas.inc, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\System\msadc\adcjavas.inc.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\System\msadc\adcjavas.inc, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\System\msadc\adcvbs.inc, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\System\msadc\adcvbs.inc, type = size, size_out = 623 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\System\msadc\adcvbs.inc, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\System\msadc\adcvbs.inc.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\System\msadc\adcvbs.inc, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc, type = size, size_out = 9804 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\System\Ole DB\oledbvbs.inc, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\System\Ole DB\oledbvbs.inc, type = size, size_out = 9975 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\System\Ole DB\oledbvbs.inc, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\System\Ole DB\oledbvbs.inc.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\System\Ole DB\oledbvbs.inc, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\desktop.ini, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\desktop.ini, type = size, size_out = 174 True 1
Fn
File Get Info filename = C:\Program Files\desktop.ini, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\desktop.ini.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\desktop.ini.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\desktop.ini, size = 1048560, size_out = 174 True 1
Fn
Data
File Write filename = C:\Program Files\desktop.ini.id-9C354B42.[bestdecoding@cock.li].best, size = 176 True 1
Fn
Data
File Read filename = C:\Program Files\desktop.ini, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\desktop.ini.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\desktop.ini True 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-over-select.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-over-select.png, type = size, size_out = 3016 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-over-select.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-over-select.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-over-select.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-static.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-static.png, type = size, size_out = 2019 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-static.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-static.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-static.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-border.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-border.png, type = size, size_out = 13239 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-border.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-border.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-border.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-highlight.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-highlight.png, type = size, size_out = 5761 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-highlight.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-highlight.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-highlight.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-imageMask.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-imageMask.png, type = size, size_out = 8169 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-imageMask.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-imageMask.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-imageMask.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-shadow.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-shadow.png, type = size, size_out = 25662 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-shadow.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-shadow.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-shadow.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 39515 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 39520 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl, type = size, size_out = 29790 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl, size = 1048560, size_out = 29790 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 29792 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF, type = size, size_out = 9024 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF, size = 1048560, size_out = 9024 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 9040 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF, type = size, size_out = 7216 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF, size = 1048560, size_out = 7216 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 7232 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF, type = size, size_out = 14873 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF, size = 1048560, size_out = 14873 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 14880 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF, type = size, size_out = 5253 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF, size = 1048560, size_out = 5253 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 5264 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF, type = size, size_out = 2596 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF, size = 1048560, size_out = 2596 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 2608 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF, type = size, size_out = 10607 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF, size = 1048560, size_out = 10607 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 10608 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF, type = size, size_out = 15308 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF, size = 1048560, size_out = 15308 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 15312 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF, type = size, size_out = 5315 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF, size = 1048560, size_out = 5315 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 5328 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF, type = size, size_out = 5016 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF, size = 1048560, size_out = 5016 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 5024 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF, type = size, size_out = 4390 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF, size = 1048560, size_out = 4390 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 4400 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF, type = size, size_out = 3966 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF, size = 1048560, size_out = 3966 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 3968 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF, type = size, size_out = 3378 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF, size = 1048560, size_out = 3378 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 3392 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, type = size, size_out = 1596 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, size = 1048560, size_out = 1596 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1600 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF, type = size, size_out = 7968 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF, size = 1048560, size_out = 7968 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7984 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF, type = size, size_out = 1832 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF, size = 1048560, size_out = 1832 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1840 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF, type = size, size_out = 2636 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF, size = 1048560, size_out = 2636 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF, type = size, size_out = 6636 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF, size = 1048560, size_out = 6636 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 6640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF, type = size, size_out = 4612 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF, size = 1048560, size_out = 4612 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4624 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF, type = size, size_out = 3144 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF, size = 1048560, size_out = 3144 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3152 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF, type = size, size_out = 7668 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF, size = 1048560, size_out = 7668 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7680 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF, type = size, size_out = 7804 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF, size = 1048560, size_out = 7804 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7808 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, type = size, size_out = 4870 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, size = 1048560, size_out = 4870 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4880 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF, type = size, size_out = 16112 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF, size = 1048560, size_out = 16112 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 16128 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF, type = size, size_out = 16676 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF, size = 1048560, size_out = 16676 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 16688 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF, type = size, size_out = 26748 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF, size = 1048560, size_out = 26748 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 26752 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF, type = size, size_out = 4924 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF, size = 1048560, size_out = 4924 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4928 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF, type = size, size_out = 4066 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF, size = 1048560, size_out = 4066 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4080 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF, type = size, size_out = 24778 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF, size = 1048560, size_out = 24778 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 24784 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF, type = size, size_out = 15733 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF, size = 1048560, size_out = 15733 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 15744 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF, size = 1048560, size_out = 12982 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 12992 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF, size = 1048560, size_out = 9710 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 9712 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF, size = 1048560, size_out = 8772 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 8784 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 1536 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1552 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 4708 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4720 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 1736 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1744 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 12482 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 12496 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 2556 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2560 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 5752 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5760 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
Thread 0x588
531 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 3
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml, type = size, size_out = 31744 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml, type = size, size_out = 3166 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 7
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg, type = size, size_out = 1074 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg, type = size, size_out = 2575 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif, type = size, size_out = 4587 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif, type = size, size_out = 2319 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf, type = size, size_out = 3792 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm, type = size, size_out = 231 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg, type = size, size_out = 23871 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read size = 1048560, size_out = 3970 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 3984 True 1
Fn
Data
File Read size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF, type = size, size_out = 4100 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF, size = 1048560, size_out = 4100 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 4112 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG, type = size, size_out = 47962 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG, size = 1048560, size_out = 47962 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 47968 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF, type = size, size_out = 3611 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF, size = 1048560, size_out = 3611 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 3616 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF, type = size, size_out = 937 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF, size = 1048560, size_out = 937 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 944 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF, type = size, size_out = 1009 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 1009 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1024 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG, type = size, size_out = 30170 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG, size = 1048560, size_out = 30170 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 30176 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config, type = size, size_out = 716 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config, size = 1048560, size_out = 716 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config.id-9C354B42.[bestdecoding@cock.li].best, size = 720 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config.id-9C354B42.[bestdecoding@cock.li].best, size = 252 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config True 1
Fn
File Create filename = C:\Program Files\Common Files\Services\verisign.bmp, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Services\verisign.bmp, type = size, size_out = 2702 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Services\verisign.bmp, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Services\verisign.bmp.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Services\verisign.bmp, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\System\ado\adojavas.inc, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\System\ado\adojavas.inc, type = size, size_out = 14610 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\System\ado\adojavas.inc, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\System\ado\adojavas.inc.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\System\ado\adojavas.inc, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\System\ado\adovbs.inc, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\System\ado\adovbs.inc, type = size, size_out = 14951 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\System\ado\adovbs.inc, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\System\ado\adovbs.inc.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\System\ado\adovbs.inc, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png, type = size, size_out = 11861 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png, type = size, size_out = 3304 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_VideoInset.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_VideoInset.png, type = size, size_out = 3467 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_VideoInset.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_VideoInset.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_VideoInset.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground_PAL.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground_PAL.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground_PAL.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground_PAL.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png, size = 1048560, size_out = 17248 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 17264 True 1
Fn
Data
File Read filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 228 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, type = size, size_out = 18738 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, size = 1048560, size_out = 18738 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 18752 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 228 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, type = size, size_out = 11891 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, size = 1048560, size_out = 11891 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 11904 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, type = size, size_out = 517 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, size = 1048560, size_out = 517 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 528 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, type = size, size_out = 502 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, size = 1048560, size_out = 502 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 512 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, type = size, size_out = 12702 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, size = 1048560, size_out = 12702 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 12704 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF, type = size, size_out = 7583 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF, size = 1048560, size_out = 7583 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 7584 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, type = size, size_out = 6984 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, size = 1048560, size_out = 6984 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 6992 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, type = size, size_out = 13254 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, size = 1048560, size_out = 13254 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 13264 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF, type = size, size_out = 8582 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF, size = 1048560, size_out = 8582 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 8592 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, type = size, size_out = 5684 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 5684 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5696 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, type = size, size_out = 20578 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, size = 1048560, size_out = 20578 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 20592 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF, type = size, size_out = 10832 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF, size = 1048560, size_out = 10832 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 10848 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF, type = size, size_out = 3012 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF, size = 1048560, size_out = 3012 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3024 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF, type = size, size_out = 2756 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF, size = 1048560, size_out = 2756 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2768 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF, type = size, size_out = 7372 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF, size = 1048560, size_out = 7372 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7376 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF, type = size, size_out = 7540 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF, size = 1048560, size_out = 7540 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7552 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF, type = size, size_out = 6632 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF, size = 1048560, size_out = 6632 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 6640 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF, type = size, size_out = 7804 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF, size = 1048560, size_out = 7804 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL, size = 7808 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF, type = size, size_out = 28948 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF, size = 1048560, size_out = 28948 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 28960 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF, type = size, size_out = 20554 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF, size = 1048560, size_out = 20554 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 20560 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF, type = size, size_out = 7966 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF, size = 1048560, size_out = 7966 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7968 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF, type = size, size_out = 13515 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF, size = 1048560, size_out = 13515 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 13520 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF, type = size, size_out = 20189 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF, size = 1048560, size_out = 20189 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 20192 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF, type = size, size_out = 3986 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF, size = 1048560, size_out = 3986 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4000 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF, type = size, size_out = 8070 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF, size = 1048560, size_out = 8070 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 8080 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF, type = size, size_out = 9304 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF, size = 1048560, size_out = 9304 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 9312 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF, type = size, size_out = 4024 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF, size = 1048560, size_out = 4024 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4032 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF, type = size, size_out = 14444 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF, size = 1048560, size_out = 14444 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 14448 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF True 1
Fn
Thread 0x704
516 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 3
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, type = size, size_out = 33280 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, type = size, size_out = 197120 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, type = size, size_out = 224256 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, type = size, size_out = 222208 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi, type = size, size_out = 194048 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 1600388 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, type = size, size_out = 1434 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 2
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 53115 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 53120 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG, type = size, size_out = 34163 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG, size = 1048560, size_out = 34163 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 34176 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 27177 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, size = 1048560, size_out = 27177 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 27184 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM, type = size, size_out = 334427 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM, size = 1048560, size_out = 334427 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 334432 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 228 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM, type = size, size_out = 123956 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM, size = 1048560, size_out = 123956 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 123968 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM, type = size, size_out = 416918 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM, size = 1048560, size_out = 416918 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 416928 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM True 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DissolveAnother.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DissolveAnother.png, type = size, size_out = 27935 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DissolveAnother.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DissolveAnother.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DissolveAnother.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DissolveNoise.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DissolveNoise.png, type = size, size_out = 751669 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DissolveNoise.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DissolveNoise.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DissolveNoise.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png, type = size, size_out = 10123 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png, type = size, size_out = 3286 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png, type = size, size_out = 3316 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_notes-txt-background.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_notes-txt-background.png, type = size, size_out = 7888 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_notes-txt-background.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_notes-txt-background.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_notes-txt-background.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 6684 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 6688 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF, type = size, size_out = 3251 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF, size = 1048560, size_out = 3251 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 3264 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF, type = size, size_out = 8097 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF, size = 1048560, size_out = 8097 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 8112 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF, type = size, size_out = 7686 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF, size = 1048560, size_out = 7686 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 7696 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF, type = size, size_out = 4955 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF, size = 1048560, size_out = 4955 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 4960 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF, type = size, size_out = 5030 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF, size = 1048560, size_out = 5030 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 5040 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF, type = size, size_out = 1146 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF, size = 1048560, size_out = 1146 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1152 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF, type = size, size_out = 3120 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF, size = 1048560, size_out = 3120 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 3136 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF, type = size, size_out = 3026 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF, size = 1048560, size_out = 3026 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3040 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, type = size, size_out = 4734 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, size = 1048560, size_out = 4734 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4736 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF, type = size, size_out = 26332 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF, size = 1048560, size_out = 26332 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 26336 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF, type = size, size_out = 27858 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF, size = 1048560, size_out = 27858 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 27872 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF, type = size, size_out = 3746 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF, size = 1048560, size_out = 3746 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3760 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF, type = size, size_out = 5836 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF, size = 1048560, size_out = 5836 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5840 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF, type = size, size_out = 8492 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF, size = 1048560, size_out = 8492 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 8496 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF, type = size, size_out = 2016 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF, size = 1048560, size_out = 2016 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2032 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF, type = size, size_out = 2492 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF, size = 1048560, size_out = 2492 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2496 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF, type = size, size_out = 3348 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 3348 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3360 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF, type = size, size_out = 24320 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF, size = 1048560, size_out = 24320 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 24336 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF, type = size, size_out = 47996 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF, size = 1048560, size_out = 47996 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 48000 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF, type = size, size_out = 40206 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF, size = 1048560, size_out = 40206 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 40208 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF, type = size, size_out = 47786 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF, size = 1048560, size_out = 47786 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 47792 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF, type = size, size_out = 14540 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF, size = 1048560, size_out = 14540 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 14544 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF, type = size, size_out = 20454 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF, size = 1048560, size_out = 20454 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 20464 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF, type = size, size_out = 1012 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF, size = 1048560, size_out = 1012 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1024 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF, type = size, size_out = 880 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF, size = 1048560, size_out = 880 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 896 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF, type = size, size_out = 10146 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF, size = 1048560, size_out = 10146 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 10160 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, type = size, size_out = 1464 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, size = 1048560, size_out = 1464 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1472 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF, type = size, size_out = 1696 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF, size = 1048560, size_out = 1696 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1712 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF, type = size, size_out = 1516 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF, size = 1048560, size_out = 1516 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1520 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF, type = size, size_out = 812 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF, size = 1048560, size_out = 812 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 816 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF, type = size, size_out = 13102 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF, size = 1048560, size_out = 13102 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 13104 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
Thread 0x6d8
602 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 3
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, type = size, size_out = 62976 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml, type = size, size_out = 247 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 8
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF, type = size, size_out = 2604 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF, size = 1048560, size_out = 2604 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 2608 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG, type = size, size_out = 29305 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG, size = 1048560, size_out = 29305 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 29312 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF, type = size, size_out = 2209 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF, size = 1048560, size_out = 2209 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 2224 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG, type = size, size_out = 18380 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG, size = 1048560, size_out = 18380 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 18384 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, type = size, size_out = 44302 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, size = 1048560, size_out = 44302 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 44304 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF, type = size, size_out = 1571 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF, size = 1048560, size_out = 1571 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 1584 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM, type = size, size_out = 58026 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM, size = 1048560, size_out = 58026 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 58032 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG, type = size, size_out = 169637 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG, size = 1048560, size_out = 169637 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG.id-9C354B42.[bestdecoding@cock.li].best, size = 169648 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG True 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_mainImage-mask.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_mainImage-mask.png, type = size, size_out = 4968 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_mainImage-mask.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_mainImage-mask.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_mainImage-mask.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png, type = size, size_out = 3143 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\menu_style_default_Thumbnail.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\menu_style_default_Thumbnail.png, type = size, size_out = 4842 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\menu_style_default_Thumbnail.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\menu_style_default_Thumbnail.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\menu_style_default_Thumbnail.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_ButtonGraphic.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_ButtonGraphic.png, type = size, size_out = 5088 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_ButtonGraphic.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_ButtonGraphic.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_SelectionSubpicture.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_SelectionSubpicture.png, type = size, size_out = 3130 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_SelectionSubpicture.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_SelectionSubpicture.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_ButtonGraphic.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_ButtonGraphic.png, type = size, size_out = 5025 True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_ButtonGraphic.png, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_ButtonGraphic.png.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv, destination_filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read size = 1048560, size_out = 30948 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 30960 True 1
Fn
Data
File Read size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl, type = size, size_out = 28974 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl, size = 1048560, size_out = 28974 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 28976 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl, type = size, size_out = 34076 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl, size = 1048560, size_out = 34076 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 34080 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl, type = size, size_out = 32146 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl, size = 1048560, size_out = 32146 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 32160 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, type = size, size_out = 3484 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, size = 1048560, size_out = 3484 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 3488 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, type = size, size_out = 3140 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, size = 1048560, size_out = 3140 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 3152 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF, type = size, size_out = 12482 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF, size = 1048560, size_out = 12482 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 12496 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF, type = size, size_out = 4894 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF, size = 1048560, size_out = 4894 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 4896 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, type = size, size_out = 5375 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, size = 1048560, size_out = 5375 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 5376 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF, type = size, size_out = 9248 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF, size = 1048560, size_out = 9248 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 9264 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF, type = size, size_out = 14428 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF, size = 1048560, size_out = 14428 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 14432 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF, type = size, size_out = 7072 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF, size = 1048560, size_out = 7072 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7088 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF, type = size, size_out = 3344 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF, size = 1048560, size_out = 3344 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3360 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, type = size, size_out = 2108 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, size = 1048560, size_out = 2108 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2112 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF, type = size, size_out = 9240 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF, size = 1048560, size_out = 9240 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 9248 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF, type = size, size_out = 2344 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF, size = 1048560, size_out = 2344 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 2352 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF, type = size, size_out = 6060 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF, size = 1048560, size_out = 6060 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 6064 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF, type = size, size_out = 3416 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF, size = 1048560, size_out = 3416 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3424 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF, type = size, size_out = 4296 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF, size = 1048560, size_out = 4296 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4304 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF, type = size, size_out = 3228 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF, size = 1048560, size_out = 3228 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3232 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF, type = size, size_out = 4808 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF, size = 1048560, size_out = 4808 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4816 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF, type = size, size_out = 4996 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF, size = 1048560, size_out = 4996 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5008 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF, type = size, size_out = 5004 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF, size = 1048560, size_out = 5004 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5008 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF, type = size, size_out = 26886 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF, size = 1048560, size_out = 26886 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 26896 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF, type = size, size_out = 11636 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF, size = 1048560, size_out = 11636 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 11648 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF, type = size, size_out = 22516 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF, size = 1048560, size_out = 22516 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 22528 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF, type = size, size_out = 16180 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF, size = 1048560, size_out = 16180 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 16192 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF, type = size, size_out = 17236 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF, size = 1048560, size_out = 17236 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 17248 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF, type = size, size_out = 14486 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF, size = 1048560, size_out = 14486 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 14496 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF, type = size, size_out = 18304 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF, size = 1048560, size_out = 18304 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 18320 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF, type = size, size_out = 11058 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF, size = 1048560, size_out = 11058 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 11072 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF, type = size, size_out = 12520 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF, size = 1048560, size_out = 12520 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 12528 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF, type = size, size_out = 9818 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF, size = 1048560, size_out = 9818 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 9824 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF, type = size, size_out = 7862 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF, size = 1048560, size_out = 7862 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 7872 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF, type = size, size_out = 5272 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF, size = 1048560, size_out = 5272 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 5280 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF, type = size, size_out = 3016 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF, size = 1048560, size_out = 3016 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3024 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, type = size, size_out = 3780 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, size = 1048560, size_out = 3780 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 3792 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF, type = size, size_out = 4164 True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF, size = 1048560, size_out = 4164 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 4176 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF True 1
Fn
Thread 0x688
225 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 1
Fn
File Create filename = C:\Boot\BCD, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\BCD.LOG1, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\BCD.LOG1, type = size, size_out = 0 True 1
Fn
File Create filename = C:\Boot\BCD.LOG2, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\BCD.LOG2, type = size, size_out = 0 True 1
Fn
File Create filename = C:\Boot\cs-CZ\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\cs-CZ\bootmgr.exe.mui, type = size, size_out = 89168 True 1
Fn
File Get Info filename = C:\Boot\cs-CZ\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\cs-CZ\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\cs-CZ\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\da-DK\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\da-DK\bootmgr.exe.mui, type = size, size_out = 87616 True 1
Fn
File Get Info filename = C:\Boot\da-DK\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\da-DK\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\da-DK\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\de-DE\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\de-DE\bootmgr.exe.mui, type = size, size_out = 91712 True 1
Fn
File Get Info filename = C:\Boot\de-DE\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\de-DE\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\de-DE\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Boot\el-GR\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Boot\el-GR\bootmgr.exe.mui, type = size, size_out = 94800 True 1
Fn
File Get Info filename = C:\Boot\el-GR\bootmgr.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Boot\el-GR\bootmgr.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Boot\el-GR\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Move source_filename = C:\Boot\Fonts\chs_boot.ttf, destination_filename = C:\Boot\Fonts\chs_boot.ttf.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Boot\Fonts\cht_boot.ttf, destination_filename = C:\Boot\Fonts\cht_boot.ttf.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Boot\Fonts\jpn_boot.ttf, destination_filename = C:\Boot\Fonts\jpn_boot.ttf.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Boot\Fonts\kor_boot.ttf, destination_filename = C:\Boot\Fonts\kor_boot.ttf.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read size = 1048560, size_out = 1048560 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi, size = 1048560 True 1
Fn
Data
File Read size = 1048560, size_out = 329096 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi, size = 329104 True 1
Fn
Data
File Read size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll, type = size, size_out = 7378792 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll, destination_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 786688 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg, type = size, size_out = 1377656 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 1048560 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 329096 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE, size = 329104 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, type = size, size_out = 629664 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, size = 1048560, size_out = 629664 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 629680 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, type = size, size_out = 323936 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, size = 1048560, size_out = 323936 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT.id-9C354B42.[bestdecoding@cock.li].best, size = 323952 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT, type = size, size_out = 320384 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT, size = 1048560, size_out = 320384 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT.id-9C354B42.[bestdecoding@cock.li].best, size = 320400 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG, type = size, size_out = 1382 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG, size = 1048560, size_out = 1382 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG.id-9C354B42.[bestdecoding@cock.li].best, size = 1392 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT, type = size, size_out = 73080 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT, size = 1048560, size_out = 73080 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT.id-9C354B42.[bestdecoding@cock.li].best, size = 73088 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, type = size, size_out = 280448 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, size = 1048560, size_out = 280448 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT.id-9C354B42.[bestdecoding@cock.li].best, size = 280464 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe, type = size, size_out = 430080 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, size = 1048560, size_out = 430080 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 430096 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL, type = size, size_out = 862608 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL, size = 1048560, size_out = 862608 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 862624 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, type = size, size_out = 41864 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, size = 1048560, size_out = 41864 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 41872 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll, type = size, size_out = 105344 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll, size = 1048560, size_out = 105344 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 105360 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 238 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF, type = size, size_out = 3213192 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 786690 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL, type = size, size_out = 342960 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL, size = 1048560, size_out = 342960 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 342976 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL, type = size, size_out = 15800 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL, size = 1048560, size_out = 15800 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 15808 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
Thread 0x5b4
185 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 7
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab, type = size, size_out = 162970271 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab, destination_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786692 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, type = size, size_out = 36233052 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, destination_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786692 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab, type = size, size_out = 195011319 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab, destination_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 786692 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE.id-9C354B42.[bestdecoding@cock.li].best, type = size, size_out = 994184 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE, size = 1048560, size_out = 994184 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, size = 994192 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, size = 228 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT, type = size, size_out = 606062 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT, size = 1048560, size_out = 606062 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT.id-9C354B42.[bestdecoding@cock.li].best, size = 606064 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT, type = size, size_out = 241024 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT, size = 1048560, size_out = 241024 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT.id-9C354B42.[bestdecoding@cock.li].best, size = 241040 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT, type = size, size_out = 302976 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT, size = 1048560, size_out = 302976 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT.id-9C354B42.[bestdecoding@cock.li].best, size = 302992 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, type = size, size_out = 1257984 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, size = 1048560, size_out = 1048560 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, size = 1048560, size_out = 209424 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 209440 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 228 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL, type = size, size_out = 52656 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL, size = 1048560, size_out = 52656 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 52672 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL, type = size, size_out = 20944 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL, size = 1048560, size_out = 20944 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 20960 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL, type = size, size_out = 55680 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL, size = 1048560, size_out = 55680 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 55696 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 250 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL, type = size, size_out = 1388416 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL, size = 1048560, size_out = 1048560 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL, size = 1048560, size_out = 339856 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 339872 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 252 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL, type = size, size_out = 11656 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL, size = 1048560, size_out = 11656 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 11664 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL, type = size, size_out = 1012648 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL, size = 1048560, size_out = 1012648 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1012656 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
Thread 0x584
216 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 7
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, type = size, size_out = 715834 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe, type = size, size_out = 174440 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe, size = 1048560, size_out = 174440 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[bestdecoding@cock.li].best, size = 174448 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[bestdecoding@cock.li].best, size = 226 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, type = size, size_out = 1463568 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 1048560 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 415008 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 415024 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll True 1
Fn
File Create filename = C:\pagefile.sys, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, type = size, size_out = 99136 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, size = 1048560, size_out = 99136 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 99152 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, type = size, size_out = 1369952 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, size = 1048560, size_out = 1048560 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, size = 1048560, size_out = 321392 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 321408 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, type = size, size_out = 1486736 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, size = 1048560, size_out = 1048560 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, size = 1048560, size_out = 438176 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 438192 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL, type = size, size_out = 2124664 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 786690 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM, type = size, size_out = 1908 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM, size = 1048560, size_out = 1908 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 1920 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF.id-9C354B42.[bestdecoding@cock.li].best, size = 224 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui, type = size, size_out = 3584 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui, type = size, size_out = 4096 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe, type = size, size_out = 193024 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui, type = size, size_out = 3584 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui, type = size, size_out = 3584 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, type = size, size_out = 4096 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll.id-9C354B42.[bestdecoding@cock.li].best False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF, size = 1048560, size_out = 419232 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 419248 True 1
Fn
Data
File Read filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 230 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui, type = size, size_out = 26624 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe, type = size, size_out = 378880 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL, type = size, size_out = 198056 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL, size = 1048560, size_out = 198056 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 198064 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL, type = size, size_out = 154448 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL, size = 1048560, size_out = 154448 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 154464 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL, type = size, size_out = 2528128 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 786690 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF, type = size, size_out = 744888 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL, size = 1048560, size_out = 744888 True 1
Fn
Data
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF, size = 744896 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL, type = size, size_out = 15800 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL, size = 1048560, size_out = 15800 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 15808 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
Thread 0x720
243 0
»
Category Operation Information Success Count Logfile
Module Get Handle module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x760a0000 True 1
Fn
Module Get Address module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x760cd650 True 1
Fn
System Sleep duration = 100 milliseconds (0.100 seconds) True 7
Fn
File Create filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab, type = size, size_out = 1463568 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi, type = size, size_out = 1992192 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi, destination_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 786696 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, type = size, size_out = 715834 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 1048560, size_out = 715834 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[bestdecoding@cock.li].best, size = 715840 True 1
Fn
Data
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[bestdecoding@cock.li].best, size = 260 True 1
Fn
Data
File Delete filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi, type = size, size_out = 12060672 True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi, type = file_attributes True 1
Fn
File Get Info filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi, destination_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 786692 True 1
Fn
Data
File Write filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 2
Fn
Data
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 64096 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, size = 1048560, size_out = 64096 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 64112 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, type = size, size_out = 2557 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, size = 1048560, size_out = 2557 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT.id-9C354B42.[bestdecoding@cock.li].best, size = 2560 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, type = size, size_out = 543304 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, size = 1048560, size_out = 543304 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 543312 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest, type = size, size_out = 566 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest, size = 1048560, size_out = 566 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest.id-9C354B42.[bestdecoding@cock.li].best, size = 576 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest.id-9C354B42.[bestdecoding@cock.li].best, size = 254 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP, type = size, size_out = 176311 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP, size = 1048560, size_out = 176311 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP.id-9C354B42.[bestdecoding@cock.li].best, size = 176320 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF, type = size, size_out = 7656 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF, size = 1048560, size_out = 7656 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF.id-9C354B42.[bestdecoding@cock.li].best, size = 7664 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL, type = size, size_out = 31104 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL, size = 1048560, size_out = 31104 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 31120 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, type = size, size_out = 38768 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, size = 1048560, size_out = 38768 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 38784 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, type = size, size_out = 1312656 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, size = 1048560, size_out = 1048560 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 1048560 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, size = 1048560, size_out = 264096 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 264112 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG, type = size, size_out = 6811 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG, size = 1048560, size_out = 6811 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG.id-9C354B42.[bestdecoding@cock.li].best, size = 6816 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, type = size, size_out = 712592 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, size = 1048560, size_out = 712592 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT.id-9C354B42.[bestdecoding@cock.li].best, size = 712608 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT.id-9C354B42.[bestdecoding@cock.li].best, size = 236 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL, type = size, size_out = 1831424 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Move source_filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[bestdecoding@cock.li].best True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 262144, size_out = 262144 True 3
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 786692 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 262144 True 3
Fn
Data
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF, type = size, size_out = 43408 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL, size = 1048560, size_out = 43408 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 43424 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 232 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL, type = size, size_out = 442272 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL, size = 1048560, size_out = 442272 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 442288 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL, type = size, size_out = 899992 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL, size = 1048560, size_out = 899992 True 1
Fn
Data
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 900000 True 1
Fn
Data
File Read filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL, size = 1048560, size_out = 0 True 1
Fn
File Write filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[bestdecoding@cock.li].best, size = 234 True 1
Fn
Data
File Delete filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL, type = size, size_out = 15800 True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL, type = file_attributes True 1
Fn
File Get Info filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL.id-9C354B42.[bestdecoding@cock.li].best, type = file_attributes False 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
File Create filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL.id-9C354B42.[bestdecoding@cock.li].best, desired_access = GENERIC_WRITE True 1
Fn
Process #13: cmd.exe
245 0
»
Information Value
ID #13
File Name c:\windows\system32\cmd.exe
Command Line "C:\Windows\system32\cmd.exe"
Initial Working Directory C:\Windows\system32\
Monitor Start Time: 00:03:16, Reason: Child Process
Unmonitor End Time: 00:03:29, Reason: Terminated by Timeout
Monitor Duration 00:00:13
OS Process Information
»
Information Value
PID 0x370
Parent PID 0x734 (c:\programdata\microsoft\windows\start menu\programs\startup\1.exe)
Is Created or Modified Executable False
Integrity Level High (Elevated)
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x 684
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory rw True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000020000 0x00020000 0x0002ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000030000 0x00030000 0x00033fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000040000 0x00040000 0x00040fff Pagefile Backed Memory r True False False -
locale.nls 0x00050000 0x000b6fff Memory Mapped File r False False False -
pagefile_0x00000000000c0000 0x000c0000 0x000c6fff Pagefile Backed Memory r True False False -
private_0x00000000000d0000 0x000d0000 0x001cffff Private Memory rw True False False -
pagefile_0x00000000001d0000 0x001d0000 0x001d1fff Pagefile Backed Memory rw True False False -
private_0x00000000001e0000 0x001e0000 0x001e0fff Private Memory rw True False False -
private_0x00000000001f0000 0x001f0000 0x001fffff Private Memory rw True False False -
private_0x0000000000200000 0x00200000 0x002fffff Private Memory rw True False False -
private_0x0000000000300000 0x00300000 0x00300fff Private Memory rw True False False -
c_1251.nls 0x00310000 0x00320fff Memory Mapped File r False False False -
private_0x0000000000360000 0x00360000 0x0045ffff Private Memory rw True False False -
pagefile_0x0000000000460000 0x00460000 0x005e7fff Pagefile Backed Memory r True False False -
pagefile_0x00000000005f0000 0x005f0000 0x00770fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000780000 0x00780000 0x01b7ffff Pagefile Backed Memory r True False False -
pagefile_0x0000000001b80000 0x01b80000 0x01ec2fff Pagefile Backed Memory r True False False -
basebrd.dll 0x01ed0000 0x01f97fff Memory Mapped File r False False False -
pagefile_0x0000000001fa0000 0x01fa0000 0x02392fff Pagefile Backed Memory r True False False -
sortdefault.nls 0x023a0000 0x0266efff Memory Mapped File r False False False -
cmd.exe 0x4aa50000 0x4aaa8fff Memory Mapped File rwx True False False -
user32.dll 0x76f10000 0x77009fff Memory Mapped File rwx False False False -
kernel32.dll 0x77010000 0x7712efff Memory Mapped File rwx False False False -
ntdll.dll 0x77130000 0x772d8fff Memory Mapped File rwx False False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory r True False False -
pagefile_0x000000007efe0000 0x7efe0000 0x7f0dffff Pagefile Backed Memory r True False False -
private_0x000000007f0e0000 0x7f0e0000 0x7ffdffff Private Memory r True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
private_0x000000007fff9000 0x7fff9000 0x7fff9fff Private Memory rw True False False -
winbrand.dll 0x7fef8b00000 0x7fef8b07fff Memory Mapped File rwx False False False -
kernelbase.dll 0x7fefd150000 0x7fefd1bafff Memory Mapped File rwx False False False -
msctf.dll 0x7fefd530000 0x7fefd638fff Memory Mapped File rwx False False False -
msvcrt.dll 0x7fefd660000 0x7fefd6fefff Memory Mapped File rwx False False False -
imm32.dll 0x7fefd830000 0x7fefd85dfff Memory Mapped File rwx False False False -
usp10.dll 0x7fefefd0000 0x7feff098fff Memory Mapped File rwx False False False -
gdi32.dll 0x7feff0a0000 0x7feff106fff Memory Mapped File rwx False False False -
lpk.dll 0x7feff200000 0x7feff20dfff Memory Mapped File rwx False False False -
apisetschema.dll 0x7feff450000 0x7feff450fff Memory Mapped File rwx False False False -
pagefile_0x000007fffffb0000 0x7fffffb0000 0x7fffffd2fff Pagefile Backed Memory r True False False -
private_0x000007fffffdd000 0x7fffffdd000 0x7fffffddfff Private Memory rw True False False -
private_0x000007fffffde000 0x7fffffde000 0x7fffffdffff Private Memory rw True False False -
Threads
Thread 0x684
245 0
»
Category Operation Information Success Count Logfile
System Get Time type = System Time, time = 2019-01-23 10:46:44 (UTC) True 1
Fn
System Get Time type = Ticks, time = 82103 True 1
Fn
Module Get Handle module_name = c:\windows\system32\cmd.exe, base_address = 0x4aa50000 True 1
Fn
Module Get Handle module_name = c:\windows\system32\kernel32.dll, base_address = 0x77010000 True 1
Fn
Module Get Address module_name = c:\windows\system32\kernel32.dll, function = SetThreadUILanguage, address_out = 0x77026d40 True 1
Fn
Registry Open Key reg_name = HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System False 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 2
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
Environment Get Environment String - True 2
Fn
Data
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DisableUNCCheck, data = 24, type = REG_NONE False 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DelayedExpansion, data = 1, type = REG_NONE False 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = CompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = PathCompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = AutoRun, data = 64, type = REG_NONE False 1
Fn
Registry Open Key reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DisableUNCCheck, data = 64, type = REG_NONE False 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DelayedExpansion, data = 1, type = REG_NONE False 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = CompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = PathCompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = AutoRun, data = 9, type = REG_NONE False 1
Fn
Module Get Filename process_name = c:\windows\system32\cmd.exe, file_name_orig = C:\Windows\system32\cmd.exe, size = 260 True 1
Fn
Environment Get Environment String name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ True 1
Fn
Environment Get Environment String name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC True 1
Fn
Environment Get Environment String name = PROMPT False 1
Fn
Environment Set Environment String name = PROMPT, value = $P$G True 1
Fn
Environment Get Environment String - True 1
Fn
Data
Environment Get Environment String name = COMSPEC, result_out = C:\Windows\system32\cmd.exe True 1
Fn
Environment Get Environment String name = KEYS False 1
Fn
File Get Info filename = C:\Windows\system32, type = file_attributes True 1
Fn
File Get Info filename = C:\Windows\System32, type = file_attributes True 1
Fn
Environment Set Environment String name = =C:, value = C:\Windows\System32 True 1
Fn
Environment Get Environment String - True 1
Fn
Data
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
System Get Info type = Operating System True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 36 True 1
Fn
Data
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 2 True 1
Fn
Data
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 63 True 1
Fn
Data
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 2 True 1
Fn
Data
Module Get Handle module_name = c:\windows\system32\kernel32.dll, base_address = 0x77010000 True 1
Fn
Module Get Address module_name = c:\windows\system32\kernel32.dll, function = CopyFileExW, address_out = 0x770223d0 True 1
Fn
Module Get Address module_name = c:\windows\system32\kernel32.dll, function = IsDebuggerPresent, address_out = 0x77018290 True 1
Fn
Module Get Address module_name = c:\windows\system32\kernel32.dll, function = SetConsoleInputExeNameW, address_out = 0x770217e0 True 1
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Get Info filename = STD_INPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 2 True 1
Fn
Data
Environment Get Environment String name = PROMPT, result_out = $P$G True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 20 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Get Info filename = STD_INPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Get Info filename = STD_INPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 24 True 1
Fn
Data
Environment Get Environment String name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ True 1
Fn
Environment Get Environment String name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC True 1
Fn
Process Create process_name = C:\Windows\system32\mode.com, os_pid = 0x78c, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL True 1
Fn
Environment Set Environment String name = COPYCMD True 1
Fn
Environment Get Environment String - True 1
Fn
Data
Module Load module_name = NTDLL.DLL, base_address = 0x77130000 True 1
Fn
Module Get Address module_name = c:\windows\system32\ntdll.dll, function = NtQueryInformationProcess, address_out = 0x771814a0 True 1
Fn
Process Get Info type = PROCESS_BASIC_INFORMATION True 1
Fn
Memory Read process_name = C:\Windows\system32\mode.com, address = 0x7fffffdd000, size = 896 True 1
Fn
Data
Environment Set Environment String name = =ExitCode, value = 00000000 True 1
Fn
Environment Get Environment String - True 1
Fn
Data
Environment Set Environment String name = =ExitCodeAscii True 1
Fn
Environment Get Environment String - True 1
Fn
Data
File Open filename = STD_OUTPUT_HANDLE True 2
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 2 True 1
Fn
Data
Environment Get Environment String name = PROMPT, result_out = $P$G True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 20 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Get Info filename = STD_INPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Read filename = STD_INPUT_HANDLE, size = 1, size_out = 1 True 1
Fn
Data
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Get Info filename = STD_INPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 36 True 1
Fn
Data
Environment Get Environment String name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ True 1
Fn
Environment Get Environment String name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC True 1
Fn
Process Create process_name = C:\Windows\system32\vssadmin.exe, os_pid = 0x4f8, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL True 1
Fn
Environment Set Environment String name = COPYCMD True 1
Fn
Environment Get Environment String - True 1
Fn
Data
Process Get Info type = PROCESS_BASIC_INFORMATION True 1
Fn
Memory Read process_name = C:\Windows\system32\vssadmin.exe, address = 0x7fffffda000, size = 896 True 1
Fn
Data
Process #14: cmd.exe
60 0
»
Information Value
ID #14
File Name c:\windows\system32\cmd.exe
Command Line "C:\Windows\system32\cmd.exe"
Initial Working Directory C:\Windows\system32\
Monitor Start Time: 00:03:17, Reason: Child Process
Unmonitor End Time: 00:03:17, Reason: Self Terminated
Monitor Duration 00:00:00
OS Process Information
»
Information Value
PID 0x5ec
Parent PID 0x4f0 (c:\programdata\microsoft\windows\start menu\programs\startup\1.exe)
Is Created or Modified Executable False
Integrity Level Medium
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege
Thread IDs
0x 6B8
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory rw True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000020000 0x00020000 0x0002ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000030000 0x00030000 0x00033fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000040000 0x00040000 0x00040fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000050000 0x00050000 0x00056fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000060000 0x00060000 0x00061fff Pagefile Backed Memory rw True False False -
private_0x0000000000070000 0x00070000 0x00070fff Private Memory rw True False False -
private_0x0000000000080000 0x00080000 0x00080fff Private Memory rw True False False -
private_0x00000000000b0000 0x000b0000 0x001affff Private Memory rw True False False -
locale.nls 0x001b0000 0x00216fff Memory Mapped File r False False False -
private_0x00000000002e0000 0x002e0000 0x003dffff Private Memory rw True False False -
private_0x00000000003e0000 0x003e0000 0x004dffff Private Memory rw True False False -
basebrd.dll 0x004e0000 0x005a7fff Memory Mapped File r False False False -
private_0x00000000005d0000 0x005d0000 0x005dffff Private Memory rw True False False -
pagefile_0x00000000005e0000 0x005e0000 0x00767fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000770000 0x00770000 0x008f0fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000900000 0x00900000 0x01cfffff Pagefile Backed Memory r True False False -
pagefile_0x0000000001d00000 0x01d00000 0x02042fff Pagefile Backed Memory r True False False -
pagefile_0x0000000002050000 0x02050000 0x02442fff Pagefile Backed Memory r True False False -
sortdefault.nls 0x02450000 0x0271efff Memory Mapped File r False False False -
cmd.exe 0x4aa50000 0x4aaa8fff Memory Mapped File rwx True False False -
user32.dll 0x76f10000 0x77009fff Memory Mapped File rwx False False False -
kernel32.dll 0x77010000 0x7712efff Memory Mapped File rwx False False False -
ntdll.dll 0x77130000 0x772d8fff Memory Mapped File rwx False False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory r True False False -
pagefile_0x000000007efe0000 0x7efe0000 0x7f0dffff Pagefile Backed Memory r True False False -
private_0x000000007f0e0000 0x7f0e0000 0x7ffdffff Private Memory r True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
private_0x000000007fffa000 0x7fffa000 0x7fffafff Private Memory rw True False False -
winbrand.dll 0x7fef8b00000 0x7fef8b07fff Memory Mapped File rwx False False False -
kernelbase.dll 0x7fefd150000 0x7fefd1bafff Memory Mapped File rwx False False False -
msctf.dll 0x7fefd530000 0x7fefd638fff Memory Mapped File rwx False False False -
msvcrt.dll 0x7fefd660000 0x7fefd6fefff Memory Mapped File rwx False False False -
imm32.dll 0x7fefd830000 0x7fefd85dfff Memory Mapped File rwx False False False -
usp10.dll 0x7fefefd0000 0x7feff098fff Memory Mapped File rwx False False False -
gdi32.dll 0x7feff0a0000 0x7feff106fff Memory Mapped File rwx False False False -
lpk.dll 0x7feff200000 0x7feff20dfff Memory Mapped File rwx False False False -
apisetschema.dll 0x7feff450000 0x7feff450fff Memory Mapped File rwx False False False -
pagefile_0x000007fffffb0000 0x7fffffb0000 0x7fffffd2fff Pagefile Backed Memory r True False False -
private_0x000007fffffdd000 0x7fffffdd000 0x7fffffdefff Private Memory rw True False False -
private_0x000007fffffdf000 0x7fffffdf000 0x7fffffdffff Private Memory rw True False False -
Threads
Thread 0x6b8
60 0
»
Category Operation Information Success Count Logfile
System Get Time type = System Time, time = 2019-01-23 10:46:44 (UTC) True 1
Fn
System Get Time type = Ticks, time = 82056 True 1
Fn
Module Get Handle module_name = c:\windows\system32\cmd.exe, base_address = 0x4aa50000 True 1
Fn
Module Get Handle module_name = c:\windows\system32\kernel32.dll, base_address = 0x77010000 True 1
Fn
Module Get Address module_name = c:\windows\system32\kernel32.dll, function = SetThreadUILanguage, address_out = 0x77026d40 True 1
Fn
Registry Open Key reg_name = HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System False 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 2
Fn
File Open filename = STD_INPUT_HANDLE True 1
Fn
Environment Get Environment String - True 2
Fn
Data
Registry Open Key reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DisableUNCCheck, data = 24, type = REG_NONE False 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DelayedExpansion, data = 1, type = REG_NONE False 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = CompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = PathCompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = AutoRun, data = 64, type = REG_NONE False 1
Fn
Registry Open Key reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DisableUNCCheck, data = 64, type = REG_NONE False 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DelayedExpansion, data = 1, type = REG_NONE False 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = CompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = PathCompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Registry Read Value reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = AutoRun, data = 9, type = REG_NONE False 1
Fn
Module Get Filename process_name = c:\windows\system32\cmd.exe, file_name_orig = C:\Windows\system32\cmd.exe, size = 260 True 1
Fn
Environment Get Environment String name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ True 1
Fn
Environment Get Environment String name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC True 1
Fn
Environment Get Environment String name = PROMPT False 1
Fn
Environment Set Environment String name = PROMPT, value = $P$G True 1
Fn
Environment Get Environment String - True 1
Fn
Data
Environment Get Environment String name = COMSPEC, result_out = C:\Windows\system32\cmd.exe True 1
Fn
Environment Get Environment String name = KEYS False 1
Fn
File Get Info filename = C:\Windows\system32, type = file_attributes True 1
Fn
File Get Info filename = C:\Windows\System32, type = file_attributes True 1
Fn
Environment Set Environment String name = =C:, value = C:\Windows\System32 True 1
Fn
Environment Get Environment String - True 1
Fn
Data
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
System Get Info type = Operating System True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 36 False 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Write filename = STD_OUTPUT_HANDLE, size = 2 False 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_OUTPUT_HANDLE True 1
Fn
File Get Info filename = STD_OUTPUT_HANDLE, type = file_type True 1
Fn
File Open filename = STD_ERROR_HANDLE True 1
Fn
File Get Info filename = STD_ERROR_HANDLE, type = file_type True 1
Fn
File Open filename = STD_ERROR_HANDLE True 1
Fn
File Write filename = STD_ERROR_HANDLE, size = 51 False 1
Fn
Process #15: mode.com
0 0
»
Information Value
ID #15
File Name c:\windows\system32\mode.com
Command Line mode con cp select=1251
Initial Working Directory C:\Windows\system32\
Monitor Start Time: 00:03:17, Reason: Child Process
Unmonitor End Time: 00:03:18, Reason: Self Terminated
Monitor Duration 00:00:01
Remark No high level activity detected in monitored regions
OS Process Information
»
Information Value
PID 0x78c
Parent PID 0x370 (c:\windows\system32\cmd.exe)
Is Created or Modified Executable False
Integrity Level High (Elevated)
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x 548
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory rw True False False -
pagefile_0x0000000000030000 0x00030000 0x00033fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000040000 0x00040000 0x00040fff Pagefile Backed Memory r True False False -
private_0x00000000001f0000 0x001f0000 0x0026ffff Private Memory rw True False False -
private_0x0000000000390000 0x00390000 0x0048ffff Private Memory rw True False False -
kernel32.dll 0x77010000 0x7712efff Memory Mapped File rwx False False False -
ntdll.dll 0x77130000 0x772d8fff Memory Mapped File rwx False False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory r True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
mode.com 0xffa60000 0xffa6bfff Memory Mapped File rwx False False False -
kernelbase.dll 0x7fefd150000 0x7fefd1bafff Memory Mapped File rwx False False False -
apisetschema.dll 0x7feff450000 0x7feff450fff Memory Mapped File rwx False False False -
pagefile_0x000007fffffb0000 0x7fffffb0000 0x7fffffd2fff Pagefile Backed Memory r True False False -
private_0x000007fffffdd000 0x7fffffdd000 0x7fffffddfff Private Memory rw True False False -
private_0x000007fffffde000 0x7fffffde000 0x7fffffdffff Private Memory rw True False False -
Process #16: vssadmin.exe
0 0
»
Information Value
ID #16
File Name c:\windows\system32\vssadmin.exe
Command Line vssadmin delete shadows /all /quiet
Initial Working Directory C:\Windows\system32\
Monitor Start Time: 00:03:17, Reason: Child Process
Unmonitor End Time: 00:03:29, Reason: Terminated by Timeout
Monitor Duration 00:00:12
Remark No high level activity detected in monitored regions
OS Process Information
»
Information Value
PID 0x4f8
Parent PID 0x370 (c:\windows\system32\cmd.exe)
Is Created or Modified Executable False
Integrity Level High (Elevated)
Username XDUWTFONO\5p5NrGJn0jS HALPmcxz
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x 550
0x 530
0x 350
0x 34C
0x 714
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory rw True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000020000 0x00020000 0x0002ffff Pagefile Backed Memory rw True False False -
pagefile_0x0000000000030000 0x00030000 0x00033fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000040000 0x00040000 0x00040fff Pagefile Backed Memory r True False False -
locale.nls 0x00050000 0x000b6fff Memory Mapped File r False False False -
pagefile_0x00000000000c0000 0x000c0000 0x000c6fff Pagefile Backed Memory r True False False -
pagefile_0x00000000000d0000 0x000d0000 0x000d1fff Pagefile Backed Memory rw True False False -
vssadmin.exe.mui 0x000e0000 0x000ecfff Memory Mapped File rw False False False -
private_0x00000000000f0000 0x000f0000 0x000f0fff Private Memory rw True False False -
private_0x0000000000100000 0x00100000 0x00100fff Private Memory rw True False False -
pagefile_0x0000000000110000 0x00110000 0x00110fff Pagefile Backed Memory r True False False -
private_0x0000000000120000 0x00120000 0x0012ffff Private Memory rw True False False -
c_1251.nls 0x00130000 0x00140fff Memory Mapped File r False False False -
pagefile_0x0000000000150000 0x00150000 0x00150fff Pagefile Backed Memory r True False False -
private_0x0000000000160000 0x00160000 0x001dffff Private Memory rw True False False -
private_0x0000000000210000 0x00210000 0x0028ffff Private Memory rw True False False -
private_0x0000000000290000 0x00290000 0x0038ffff Private Memory rw True False False -
private_0x0000000000390000 0x00390000 0x0040ffff Private Memory rw True False False -
private_0x0000000000430000 0x00430000 0x0052ffff Private Memory rw True False False -
pagefile_0x0000000000530000 0x00530000 0x006b7fff Pagefile Backed Memory r True False False -
pagefile_0x00000000006c0000 0x006c0000 0x00840fff Pagefile Backed Memory r True False False -
pagefile_0x0000000000850000 0x00850000 0x01c4ffff Pagefile Backed Memory r True False False -
private_0x0000000001c90000 0x01c90000 0x01d0ffff Private Memory rw True False False -
private_0x0000000001d70000 0x01d70000 0x01deffff Private Memory rw True False False -
sortdefault.nls 0x01df0000 0x020befff Memory Mapped File r False False False -
user32.dll 0x76f10000 0x77009fff Memory Mapped File rwx False False False -
kernel32.dll 0x77010000 0x7712efff Memory Mapped File rwx False False False -
ntdll.dll 0x77130000 0x772d8fff Memory Mapped File rwx False False False -
private_0x000000007efe0000 0x7efe0000 0x7ffdffff Private Memory r True False False -
pagefile_0x000000007efe0000 0x7efe0000 0x7f0dffff Pagefile Backed Memory r True False False -
private_0x000000007f0e0000 0x7f0e0000 0x7ffdffff Private Memory r True False False -
private_0x000000007ffe0000 0x7ffe0000 0x7ffeffff Private Memory r True False False -
vssadmin.exe 0xff3f0000 0xff41cfff Memory Mapped File rwx False False False -
vsstrace.dll 0x7fef55b0000 0x7fef55c6fff Memory Mapped File rwx False False False -
vssapi.dll 0x7fef55d0000 0x7fef577ffff Memory Mapped File rwx False False False -
vss_ps.dll 0x7fef8aa0000 0x7fef8ab3fff Memory Mapped File rwx False False False -
atl.dll 0x7fefab30000 0x7fefab48fff Memory Mapped File rwx False False False -
rsaenh.dll 0x7fefc690000 0x7fefc6d6fff Memory Mapped File rwx False False False -
cryptsp.dll 0x7fefc990000 0x7fefc9a6fff Memory Mapped File rwx False False False -
cryptbase.dll 0x7fefcfb0000 0x7fefcfbefff Memory Mapped File rwx False False False -
rpcrtremote.dll 0x7fefd060000 0x7fefd073fff Memory Mapped File rwx False False False -
kernelbase.dll 0x7fefd150000 0x7fefd1bafff Memory Mapped File rwx False False False -
advapi32.dll 0x7fefd450000 0x7fefd52afff Memory Mapped File rwx False False False -
msctf.dll 0x7fefd530000 0x7fefd638fff Memory Mapped File rwx False False False -
msvcrt.dll 0x7fefd660000 0x7fefd6fefff Memory Mapped File rwx False False False -
imm32.dll 0x7fefd830000 0x7fefd85dfff Memory Mapped File rwx False False False -
rpcrt4.dll 0x7fefd860000 0x7fefd98cfff Memory Mapped File rwx False False False -
ole32.dll 0x7fefe7c0000 0x7fefe9c2fff Memory Mapped File rwx False False False -
oleaut32.dll 0x7fefee10000 0x7fefeee6fff Memory Mapped File rwx False False False -
usp10.dll 0x7fefefd0000 0x7feff098fff Memory Mapped File rwx False False False -
gdi32.dll 0x7feff0a0000 0x7feff106fff Memory Mapped File rwx False False False -
clbcatq.dll 0x7feff110000 0x7feff1a8fff Memory Mapped File rwx False False False -
lpk.dll 0x7feff200000 0x7feff20dfff Memory Mapped File rwx False False False -
sechost.dll 0x7feff390000 0x7feff3aefff Memory Mapped File rwx False False False -
apisetschema.dll 0x7feff450000 0x7feff450fff Memory Mapped File rwx False False False -
pagefile_0x000007fffffb0000 0x7fffffb0000 0x7fffffd2fff Pagefile Backed Memory r True False False -
private_0x000007fffffd4000 0x7fffffd4000 0x7fffffd5fff Private Memory rw True False False -
private_0x000007fffffd6000 0x7fffffd6000 0x7fffffd7fff Private Memory rw True False False -
private_0x000007fffffd8000 0x7fffffd8000 0x7fffffd9fff Private Memory rw True False False -
private_0x000007fffffda000 0x7fffffda000 0x7fffffdafff Private Memory rw True False False -
private_0x000007fffffdc000 0x7fffffdc000 0x7fffffddfff Private Memory rw True False False -
private_0x000007fffffde000 0x7fffffde000 0x7fffffdffff Private Memory rw True False False -
Function Logfile
Download-Icon
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy". 


    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image