Report #10684 check_circle

  • Creation Date: June 24, 2020, 2 p.m.
  • Last Update: June 24, 2020, 2:04 p.m.
  • File: ENQUIRY.exe
  • Results:
Binary
DLL
False cancel
Size
1.34MB
trid
61.7% Win64 Executable
14.7% Win32 Dynamic Link Library
10.0% Win32 Executable
4.5% OS/2 Executable
4.4% Generic Win/DOS Executable
type
PE
wordsize
32
Subsystem
Windows GUI
Hashes
md5
3549e5e0b729a3a812bf0403f5615f9c
sha1
c8d7a64358d8cd3c22c9227eee010c33bc8ebcd7
crc32
0xa8f1cb3d
sha224
dc3997cc078ada6c4ef19fc40c7e97900f388dde98b5b022c39af2e6
sha256
3661521d44323aff7053d75958c0f28532bb919be17706cab076033c394c740f
sha384
55362b1c2390489d7f7781cd100c12cd3efb00bee68fcb270061b3ed50b4ee958a1c2e19ba5b41b800ef1d3ce8446fd1
sha512
25acf5338718a184b64c21bb0c9a9b7acc4e5a358dba79c2c5b50a1efcd7fd38b696d79f296ccd0b49cb2d9de1b7b20bb88eb782a06267d907f204f0b2e0a0a9
ssdeep
24576:vAHnh+eWsN3skA4RV1Hom2KXMmHacp/+zq7g/2bEiQx67IDU0xtUDc/5:Sh+ZkldoPK8YacIWdTP7kJt7
Community
Google
False cancel
HashLib
False cancel
YARA
Matches
domain, HasDebugData, CRC32_poly_Constant, escalate_priv, HasRichSignature, VC8_Microsoft_Corporation, CRC32_table, network_http, win_files_operation, IsPacked, AutoIT_compiled_script, screenshot, IP, contentis_base64, keylogger, win_token, IsPE32, AutoIt, IsWindowsGUI, inject_thread, anti_dbg, Microsoft_Visual_Cpp_8, win_registry

Suspicious
True check_circle

Strings
List
<assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" language="*" processorArchitecture="*" publicKeyToken="6595b64144ccf1df"/>
s.kg
h.br
Gt.Ht$
B.FK
WSOCK32.dll
FSoftware\AutoIt v3\AutoIt
COMCTL32.dll
USERENV.dll
VERSION.dll
WININET.dll
WINMM.dll
UxTheme.dll
0.0.0.0
MPR.dll
AUTOITCALLVARIABLE%d
255.255.255.255
SeDebugPrivilege
SeRestorePrivilege
Sg5[FN
<"t|<%tx<'tt<$tp<&tl<!th<otd<]t`<[t\<\tX<
\Include\
fr-ch
fr-ca
fr-be
6%stw
Th%E1
0%1F1O1i1w1
rdN~%s
h%o-G
"B%E"r
%-taA
This is a third-party compiled AutoIt script.
BACKSPACE
EgcT
Hebrew
L%fYH
%sHmD
HOTKEYSET
HOTKEYPRESSED
BInclude
Duployan
TaskbarCreated
closed
failed to get memory
regular expression is too large
too many forward references
invalid range in character class
failed to get memory
number is too big
et%dg
\ at end of pattern
\c at end of pattern
two named subpatterns have the same name
BROWSER_SEARCH
HKEY_CLASSES_ROOT
TCPSHUTDOWN
BROWSER_REFRESH
AutoIt has detected the stack has become corrupt.
BROWSER_FORWARD
BROWSER_STOP
BROWSER_BACK
BROWSER_HOME
LAUNCH_MAIL
BROWSER_FAVORTIES
HKEY_LOCAL_MACHINE
Line %d (File "%s"):
VOLUME_UP
VOLUME_DOWN
VOLUME_MUTE
] is an invalid data character in JavaScript compatibility mode
LAUNCH_MEDIA
SOFTWARE\Classes\
Line %d:
d%c Un
TCPLISTEN
FtpOpenFileW
SYSTEM\CurrentControlSet\Control\Nls\Language
FtpGetFileSize
FTPSETPROXY
SW_HIDE
AUTOITWINGETTITLE
GETCURRENTSELECTION
TCPCLOSESOCKET
TCPCONNECT
HTTPSETUSERAGENT
GETSELECTED
GETSELECTEDCOUNT
HTTPSETPROXY
WINGETCLASSLIST
EWM_GETCONTROLNAME
HControl Panel\Mouse
Control Panel\Appearance
HttpOpenRequestW
HttpSendRequestW
/AutoIt3OutputDebug
mscoree.dll
LAUNCH_APP2
LAUNCH_APP1
WIN_VISTA

Foremost
Matches
0.exe, 1 MB
Suspicious
True check_circle
Heuristics
IPs
hasIPs: True check_circle
Allowed: 255.255.255.255, 1, record
Suspicious
hasAllowed: True check_circle
hasSuspicious: False cancel

URLs
Allowed
hasURLs: False cancel
Suspicious
hasAllowed: False cancel
hasSuspicious: False cancel

Files
Allowed: USER32.DLL, kernel32.dll, mscoree.dll, combase.dll, OLEAUT32.dll, ADVAPI32.dll, VERSION.dll, UxTheme.dll, WSOCK32.dll, SHELL32.dll, PSAPI.DLL, COMCTL32.dll, ole32.dll, IPHLPAPI.DLL, WININET.dll, USERENV.dll, WINMM.dll, GDI32.dll, COMDLG32.dll, MPR.dll
hasFiles: True check_circle
Suspicious
hasAllowed: True check_circle
hasSuspicious: False cancel

Binary
Sizes
RVA
RVA: 16
Suspicious: False cancel
Code
Size: 826880
Suspicious: False cancel
Image
Address: 4194304
Suspicious: False cancel
Stack
Stack: 4096
Suspicious: False cancel
Headers
Headers: 1024
Suspicious: False cancel
Suspicious: False cancel

Symbols
Number
Number: 0
Suspicious: True check_circle
Pointer
Pointer: 0
Suspicious: True check_circle
Directories
Number: 16
Suspicious: False cancel

Checksum
Value: 1409919
Suspicous: False cancel

Sections
Allowed: .text, .rdata, .data, .rsrc, .reloc
Suspicious
hasAllowed: True check_circle
hasSections: True check_circle
hasSuspicious: False cancel

Versions
OS
Version: 5
Suspicious: False cancel
Image
Version: True check_circle
Suspicious: 5
Linker
Version: 12.0
Suspicious: False cancel
Subsystem
Version: 5.1
Suspicious: False cancel
Suspicious: False cancel

EntryPoint
Address: 163850
Suspicious: False cancel

Anomalies
Anomalies: The Debug TimeDateStamp(s) and the file header TimeDateStamp do not match.
hasAnomalies: True check_circle

Libraries
Allowed: user32.dll, kernel32.dll, mscoree.dll, combase.dll, oleaut32.dll, advapi32.dll, version.dll, uxtheme.dll, wsock32.dll, shell32.dll, psapi.dll, comctl32.dll, ole32.dll, wininet.dll, userenv.dll, winmm.dll, gdi32.dll, comdlg32.dll, mpr.dll
hasLibs: True check_circle
Suspicious: iphlpapi.dll
hasAllowed: True check_circle
hasSuspicious: True check_circle

Timestamp
Past: False cancel
Valid: True check_circle
Value: 2020-06-16 07:30:11
Future: False cancel

Compilation
Packed: False cancel
Missing: False cancel
Packers
Compiled: True check_circle
Compilers: Microsoft Visual C++ 8, VC8 -> Microsoft Corporation

Obfuscation
XOR: False cancel
Fuzzing: True check_circle

PEDetector
Matches
None
Suspicious
False cancel
Disassembly
hasTricks
True check_circle
Tricks
pushret
.data: 1
.rsrc: 269
.text: 2
.rdata: 13

nopsequence
.text: 4

pushpopmath
.rsrc: 144
.text: 31
.rdata: 7
.reloc: 30

ss register
.rsrc: 4

garbagebytes
.data: 1
.rsrc: 91
.text: 2
.rdata: 5

hookdetection
.rsrc: 6
.rdata: 3
.reloc: 4

stealthimport
.text: 1

software breakpoint
.rsrc: 8
.text: 9
.rdata: 1
.reloc: 5

fakeconditionaljumps
.rsrc: 4

programcontrolflowchange
.data: 1
.rsrc: 87
.text: 2
.rdata: 5

cpuinstructionsresultscomparison
.rsrc: 9
.rdata: 9

AVclass
autoit
1
VirusTotal
md5
3549e5e0b729a3a812bf0403f5615f9c
sha1
c8d7a64358d8cd3c22c9227eee010c33bc8ebcd7
SCANS (DETECTION RATE = 52.78%)
AVG
result: Script:SNH-gen [Trj]
update: 20200624
version: 18.4.3895.0
detected: True check_circle

CMC
update: 20200624
version: 2.7.2019.1
detected: False cancel

MAX
result: malware (ai score=85)
update: 20200624
version: 2019.9.16.1
detected: True check_circle

APEX
result: Malicious
update: 20200622
version: 6.40
detected: True check_circle

Bkav
result: W32.AIDetectVM.malware1
update: 20200624
version: 1.3.0.9899
detected: True check_circle

K7GW
update: 20200624
version: 11.118.34507
detected: False cancel

Avast
result: Script:SNH-gen [Trj]
update: 20200624
version: 18.4.3895.0
detected: True check_circle

Avira
result: HEUR/AGEN.1100085
update: 20200624
version: 8.3.3.8
detected: True check_circle

Baidu
update: 20190318
version: 1.0.0.2
detected: False cancel

Cynet
result: Malicious (score: 100)
update: 20200624
version: 4.0.0.24
detected: True check_circle

Cyren
result: W32/AutoIt.IJ.gen!Eldorado
update: 20200624
version: 6.3.0.2
detected: True check_circle

DrWeb
result: Trojan.AutoIt.907
update: 20200624
version: 7.0.46.3050
detected: True check_circle

GData
result: Trojan.GenericKD.34032619
update: 20200624
version: A:25.26013B:27.19211
detected: True check_circle

Panda
update: 20200624
version: 4.6.4.2
detected: False cancel

VBA32
update: 20200624
version: 4.4.1
detected: False cancel

VIPRE
update: 20200624
version: 84712
detected: False cancel

Zoner
update: 20200623
version: 0.0.0.0
detected: False cancel

ClamAV
result: Win.Dropper.Remcos-8176465-0
update: 20200624
version: 0.102.3.0
detected: True check_circle

Comodo
update: 20200624
version: 32565
detected: False cancel

F-Prot
result: W32/AutoIt.IJ.gen!Eldorado
update: 20200624
version: 4.7.1.166
detected: True check_circle

Ikarus
result: Trojan-Spy.Keylogger.AgentTesla
update: 20200624
version: 0.1.5.2
detected: True check_circle

McAfee
result: Trojan-AitInject.aq
update: 20200624
version: 6.0.6.653
detected: True check_circle

Rising
result: Trojan.Obfus/Autoit!1.C075 (CLASSIC)
update: 20200624
version: 25.0.0.26
detected: True check_circle

Sophos
update: 20200624
version: 4.98.0
detected: False cancel

Yandex
update: 20200623
version: 5.5.2.24
detected: False cancel

Zillya
update: 20200624
version: 2.0.0.4117
detected: False cancel

Acronis
update: 20200603
version: 1.1.1.76
detected: False cancel

Alibaba
update: 20190527
version: 0.3.0.5
detected: False cancel

Arcabit
update: 20200624
version: 1.0.0.877
detected: False cancel

Cylance
update: 20200624
version: 2.3.1.101
detected: False cancel

Endgame
result: malicious (high confidence)
update: 20200608
version: 4.0.5
detected: True check_circle

FireEye
result: Generic.mg.3549e5e0b729a3a8
update: 20200624
version: 32.31.0.0
detected: True check_circle

Sangfor
result: Malware
update: 20200423
version: 1.0
detected: True check_circle

TACHYON
update: 20200624
version: 2020-06-24.02
detected: False cancel

Tencent
update: 20200624
version: 1.0.0.1
detected: False cancel

ViRobot
update: 20200624
version: 2014.3.20.0
detected: False cancel

Webroot
update: 20200624
version: 1.0.0.403
detected: False cancel

eGambit
result: Unsafe.AI_Score_99%
update: 20200624
detected: True check_circle

Ad-Aware
result: Trojan.GenericKD.34032619
update: 20200624
version: 3.0.5.370
detected: True check_circle

AegisLab
update: 20200624
version: 4.2
detected: False cancel

Emsisoft
result: Trojan.GenericKD.34032619 (B)
update: 20200624
version: 2018.12.0.1641
detected: True check_circle

F-Secure
result: Heuristic.HEUR/AGEN.1100085
update: 20200624
version: 12.0.86.52
detected: True check_circle

Fortinet
result: AutoIt/Injector.FIC!tr
update: 20200624
version: 6.2.142.0
detected: True check_circle

Invincea
result: heuristic
update: 20200502
version: 6.3.6.26157
detected: True check_circle

Jiangmin
update: 20200624
version: 16.0.100
detected: False cancel

Kingsoft
update: 20200624
version: 2013.8.14.323
detected: False cancel

Paloalto
result: generic.ml
update: 20200624
version: 1.0
detected: True check_circle

Symantec
result: AUT.Heuristic!gen5
update: 20200624
version: 1.11.0.0
detected: True check_circle

Trapmine
update: 20200619
version: 3.5.0.987
detected: False cancel

AhnLab-V3
update: 20200624
version: 3.18.0.10009
detected: False cancel

Antiy-AVL
update: 20200624
version: 3.0.0.1
detected: False cancel

Kaspersky
result: Trojan-PSW.MSIL.Agensla.ryp
update: 20200624
version: 15.0.1.13
detected: True check_circle

MaxSecure
result: Trojan.Malware.300983.susgen
update: 20200622
version: 1.0.0.1
detected: True check_circle

Microsoft
result: Trojan:Win32/Wacatac.D!ml
update: 20200624
version: 1.1.17200.2
detected: True check_circle

Qihoo-360
update: 20200624
version: 1.0.0.1120
detected: False cancel

ZoneAlarm
result: Trojan-PSW.MSIL.Agensla.ryp
update: 20200624
version: 1.0
detected: True check_circle

Cybereason
result: malicious.358d8c
update: 20190616
version: 1.2.449
detected: True check_circle

ESET-NOD32
result: a variant of Win32/Injector.Autoit.FJD
update: 20200624
version: 21546
detected: True check_circle

TrendMicro
result: TROJ_GEN.R05AC0DFI20
update: 20200624
version: 11.0.0.1006
detected: True check_circle

BitDefender
result: Trojan.GenericKD.34032619
update: 20200624
version: 7.2
detected: True check_circle

CrowdStrike
result: win/malicious_confidence_90% (W)
update: 20190702
version: 1.0
detected: True check_circle

K7AntiVirus
update: 20200624
version: 11.118.34507
detected: False cancel

SentinelOne
update: 20200601
version: 4.3.0.105
detected: False cancel

Avast-Mobile
update: 20200624
version: 200624-00
detected: False cancel

Malwarebytes
result: Trojan.MalPack.AutoIt.Generic
update: 20200624
version: 3.6.4.335
detected: True check_circle

TotalDefense
update: 20200624
version: 37.1.62.1
detected: False cancel

CAT-QuickHeal
update: 20200624
version: 14.00
detected: False cancel

NANO-Antivirus
update: 20200624
version: 1.0.134.25119
detected: False cancel

BitDefenderTheta
update: 20200624
version: 7.2.37796.0
detected: False cancel

MicroWorld-eScan
result: Trojan.GenericKD.34032619
update: 20200624
version: 14.0.409.0
detected: True check_circle

SUPERAntiSpyware
update: 20200619
version: 5.6.0.1032
detected: False cancel

TrendMicro-HouseCall
result: TROJ_GEN.R05AC0DFI20
update: 20200624
version: 10.0.0.1040
detected: True check_circle

total
72
sha256
3661521d44323aff7053d75958c0f28532bb919be17706cab076033c394c740f
scan_id
3661521d44323aff7053d75958c0f28532bb919be17706cab076033c394c740f-1593018026
resource
3549e5e0b729a3a812bf0403f5615f9c
positives
38
scan_date
2020-06-24 17:00:26
verbose_msg
Scan finished, information embedded
response_code
1
File
Trace
24/6/2020 - 13:45:42.731Unknown1480C:\malware.exeC:\malware.exe
24/6/2020 - 13:45:42.731Open1480C:\malware.exeC:\dwmapi.dll
24/6/2020 - 13:45:42.731Open1480C:\malware.exeC:\Windows\SysWOW64\dwmapi.dll
24/6/2020 - 13:45:42.731Open1480C:\malware.exeC:\Windows\SysWOW64\dwmapi.dll
24/6/2020 - 13:45:42.731Open1480C:\malware.exeC:\Windows\Globalization\Sorting\SortDefault.nls
24/6/2020 - 13:45:42.731Unknown1480C:\malware.exeC:\Windows\Globalization\Sorting\SortDefault.nlsSortDefault.nls
24/6/2020 - 13:45:42.731Open1480C:\malware.exeC:\Windows\SysWOW64\UxTheme.dll.Config
24/6/2020 - 13:45:42.731Open1480C:\malware.exeC:\Windows\SysWOW64\uxtheme.dll
24/6/2020 - 13:45:42.731Open1480C:\malware.exeC:\malware.exe.Local
24/6/2020 - 13:45:42.731Open1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
24/6/2020 - 13:45:42.731Unknown1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
24/6/2020 - 13:45:42.731Open1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
24/6/2020 - 13:45:42.731Unknown1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
24/6/2020 - 13:45:42.731Open1480C:\malware.exeC:\malware.exe
24/6/2020 - 13:45:42.731Unknown1480C:\malware.exeC:\malware.exe
24/6/2020 - 13:45:42.731Open1480C:\malware.exeC:\
24/6/2020 - 13:45:42.731Unknown1480C:\malware.exeC:\
24/6/2020 - 13:45:42.731Open1480C:\malware.exeC:\Monitor
24/6/2020 - 13:45:42.731Unknown1480C:\malware.exeC:\Monitor
24/6/2020 - 13:45:42.731Open1480C:\malware.exeC:\Monitor\Malware
24/6/2020 - 13:45:42.731Unknown1480C:\malware.exeC:\Monitor\Malware
24/6/2020 - 13:45:56.481Open1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
24/6/2020 - 13:45:56.715Open1480C:\malware.exeC:\Windows\SysWOW64\apphelp.dll
24/6/2020 - 13:45:56.715Open1480C:\malware.exeC:\Windows\SysWOW64\apphelp.dll
24/6/2020 - 13:45:56.715Open1480C:\malware.exeC:\Windows\AppPatch\sysmain.sdb
24/6/2020 - 13:45:56.715Open1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
24/6/2020 - 13:45:56.715Unknown1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
24/6/2020 - 13:45:56.715Open1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
24/6/2020 - 13:45:56.715Open1480C:\malware.exeC:\
24/6/2020 - 13:45:56.715Unknown1480C:\malware.exeC:\
24/6/2020 - 13:45:56.715Open1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
24/6/2020 - 13:45:56.715Unknown1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
24/6/2020 - 13:45:56.715Open1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
24/6/2020 - 13:45:56.715Unknown1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
24/6/2020 - 13:45:56.715Open1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
24/6/2020 - 13:45:56.715Read1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
24/6/2020 - 13:45:56.715Read1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
24/6/2020 - 13:45:56.715Open1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\ui\SwDRM.dll
24/6/2020 - 13:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Prefetch\MSBUILD.EXE-A2823B68.pf
24/6/2020 - 13:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows
24/6/2020 - 13:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\System32\wow64.dll
24/6/2020 - 13:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\System32\wow64.dll
24/6/2020 - 13:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\System32\wow64win.dll
24/6/2020 - 13:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\System32\wow64win.dll
24/6/2020 - 13:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\System32\wow64cpu.dll
24/6/2020 - 13:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\System32\wow64cpu.dll
24/6/2020 - 13:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\System32\wow64log.dll
24/6/2020 - 13:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows
24/6/2020 - 13:45:56.793Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows
24/6/2020 - 13:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Monitor
24/6/2020 - 13:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\mscoree.dll
24/6/2020 - 13:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\mscoree.dll
24/6/2020 - 13:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\sechost.dll
24/6/2020 - 13:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\sechost.dll
24/6/2020 - 13:45:56.809Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\MSCOREE.DLL.local
24/6/2020 - 13:45:56.809Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
24/6/2020 - 13:45:56.809Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
24/6/2020 - 13:45:56.809Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\Upgrades.2.0.50727
24/6/2020 - 13:45:56.809Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\Upgrades.2.0.50727
24/6/2020 - 13:45:56.809Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:56.809Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:56.809Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:56.809Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:56.809Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:56.809Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:56.825Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.config
24/6/2020 - 13:45:56.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
24/6/2020 - 13:45:56.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
24/6/2020 - 13:45:56.825Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
24/6/2020 - 13:45:56.825Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
24/6/2020 - 13:45:56.825Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
24/6/2020 - 13:45:56.825Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
24/6/2020 - 13:45:56.825Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
24/6/2020 - 13:45:56.825Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
24/6/2020 - 13:45:57.278Open1480C:\malware.exeC:\Monitor
24/6/2020 - 13:45:57.278Unknown1480C:\malware.exeC:\Monitor
24/6/2020 - 13:45:57.325Open1480C:\malware.exeC:\PROPSYS.dll
24/6/2020 - 13:45:57.325Open1480C:\malware.exeC:\Windows\SysWOW64\propsys.dll
24/6/2020 - 13:45:57.325Open1480C:\malware.exeC:\Windows\SysWOW64\propsys.dll
24/6/2020 - 13:45:57.325Open1480C:\malware.exeC:\Windows\SysWOW64\shell32.dll
24/6/2020 - 13:45:57.325Open1480C:\malware.exeC:\malware.exe.Local
24/6/2020 - 13:45:57.325Open1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
24/6/2020 - 13:45:57.325Unknown1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
24/6/2020 - 13:45:57.325Open1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
24/6/2020 - 13:45:57.325Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
24/6/2020 - 13:45:57.325Open1480C:\malware.exeC:\Windows\AppPatch\sysmain.sdb
24/6/2020 - 13:45:57.325Open1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.325Unknown1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.325Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
24/6/2020 - 13:45:57.325Open1480C:\malware.exeC:\
24/6/2020 - 13:45:57.325Unknown1480C:\malware.exeC:\
24/6/2020 - 13:45:57.325Open1480C:\malware.exeC:\Windows
24/6/2020 - 13:45:57.325Unknown1480C:\malware.exeC:\Windows
24/6/2020 - 13:45:57.325Open1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.325Unknown1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.325Open1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.325Unknown1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.325Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
24/6/2020 - 13:45:57.325Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
24/6/2020 - 13:45:57.340Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
24/6/2020 - 13:45:57.340Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
24/6/2020 - 13:45:57.340Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
24/6/2020 - 13:45:57.340Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
24/6/2020 - 13:45:57.340Read1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
24/6/2020 - 13:45:57.340Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
24/6/2020 - 13:45:57.340Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
24/6/2020 - 13:45:57.340Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
24/6/2020 - 13:45:57.340Unknown1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
24/6/2020 - 13:45:57.340Open1480C:\malware.exeC:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
24/6/2020 - 13:45:57.356Unknown1480C:\malware.exeC:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dllapi-ms-win-downlevel-shell32-l1-1-0.dll
24/6/2020 - 13:45:57.356Open1480C:\malware.exeC:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
24/6/2020 - 13:45:57.356Unknown1480C:\malware.exeC:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dllapi-ms-win-downlevel-shell32-l1-1-0.dll
24/6/2020 - 13:45:57.356Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
24/6/2020 - 13:45:57.403Open1480C:\malware.exeC:\malware.exe.Local
24/6/2020 - 13:45:57.403Open1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
24/6/2020 - 13:45:57.403Unknown1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
24/6/2020 - 13:45:57.403Open1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
24/6/2020 - 13:45:57.403Open1480C:\malware.exeC:\Monitor
24/6/2020 - 13:45:57.403Unknown1480C:\malware.exeC:\Monitor
24/6/2020 - 13:45:57.403Open1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.403Unknown1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.403Open1480C:\malware.exeC:\
24/6/2020 - 13:45:57.403Unknown1480C:\malware.exeC:\
24/6/2020 - 13:45:57.403Open1480C:\malware.exeC:\Windows
24/6/2020 - 13:45:57.403Unknown1480C:\malware.exeC:\Windows
24/6/2020 - 13:45:57.403Open1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.403Unknown1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.465Open1480C:\malware.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Caches
24/6/2020 - 13:45:57.465Open1480C:\malware.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
24/6/2020 - 13:45:57.465Open1480C:\malware.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Caches
24/6/2020 - 13:45:57.465Open1480C:\malware.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
24/6/2020 - 13:45:57.465Open1480C:\malware.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000000.db
24/6/2020 - 13:45:57.465Open1480C:\malware.exeC:\Users\Behemot\Desktop\desktop.ini
24/6/2020 - 13:45:57.465Read1480C:\malware.exeC:\Users\Behemot\Desktop\desktop.ini
24/6/2020 - 13:45:57.465Open1480C:\malware.exeC:\Windows\SysWOW64\propsys.dll
24/6/2020 - 13:45:57.465Open1480C:\malware.exeC:\Windows\SysWOW64\propsys.dll
24/6/2020 - 13:45:57.465Open1480C:\malware.exeC:\Windows\System32\propsys.dll
24/6/2020 - 13:45:57.465Open1480C:\malware.exeC:\Windows\SysWOW64\propsys.dll
24/6/2020 - 13:45:57.465Open1480C:\malware.exeC:\Windows\SysWOW64\propsys.dll
24/6/2020 - 13:45:57.465Open1480C:\malware.exeC:\Windows\System32\propsys.dll
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\Windows\SysWOW64\urlmon.dll
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\Windows\SysWOW64\urlmon.dll
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\Secur32.dll
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\Windows\SysWOW64\secur32.dll
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\Windows\SysWOW64\secur32.dll
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Temporary Internet Files
24/6/2020 - 13:45:57.575Unknown1480C:\malware.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Temporary Internet Files
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\Users\Behemot\AppData\Roaming\Microsoft\Windows\Cookies
24/6/2020 - 13:45:57.575Unknown1480C:\malware.exeC:\Users\Behemot\AppData\Roaming\Microsoft\Windows\Cookies
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\
24/6/2020 - 13:45:57.575Unknown1480C:\malware.exeC:\
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\Windows
24/6/2020 - 13:45:57.575Unknown1480C:\malware.exeC:\Windows
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.575Unknown1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.575Unknown1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\Windows
24/6/2020 - 13:45:57.575Unknown1480C:\malware.exeC:\Windows
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe:Zone.Identifier
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\Monitor
24/6/2020 - 13:45:57.575Unknown1480C:\malware.exeC:\Monitor
24/6/2020 - 13:45:57.575Open1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:57.778Open1480C:\malware.exeC:\Windows\AppPatch\sysmain.sdb
24/6/2020 - 13:45:57.778Open1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.778Unknown1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.778Open1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:57.778Open1480C:\malware.exeC:\
24/6/2020 - 13:45:57.778Unknown1480C:\malware.exeC:\
24/6/2020 - 13:45:57.778Open1480C:\malware.exeC:\Windows
24/6/2020 - 13:45:57.778Unknown1480C:\malware.exeC:\Windows
24/6/2020 - 13:45:57.778Open1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.778Unknown1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.778Open1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.778Unknown1480C:\malware.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.778Open1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:57.778Read1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:57.778Read1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:57.778Read1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:57.825Open1480C:\malware.exeC:\Windows\SysWOW64\ui\SwDRM.dll
24/6/2020 - 13:45:57.825Open1480C:\malware.exeC:\Windows\SysWOW64\sfc.dll
24/6/2020 - 13:45:57.825Open1480C:\malware.exeC:\Windows\SysWOW64\sfc.dll
24/6/2020 - 13:45:57.825Open1480C:\malware.exeC:\sfc_os.DLL
24/6/2020 - 13:45:57.825Open1480C:\malware.exeC:\Windows\SysWOW64\sfc_os.dll
24/6/2020 - 13:45:57.825Open1480C:\malware.exeC:\Windows\SysWOW64\sfc_os.dll
24/6/2020 - 13:45:57.825Open1480C:\malware.exeC:\Windows\winsxs\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms
24/6/2020 - 13:45:57.825Read1480C:\malware.exeC:\Windows\winsxs\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms$$_system32_21f9a9c4a2f8b514.cdf-ms
24/6/2020 - 13:45:57.825Read1480C:\malware.exeC:\Windows\winsxs\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms$$_system32_21f9a9c4a2f8b514.cdf-ms
24/6/2020 - 13:45:57.825Read1480C:\malware.exeC:\Windows\winsxs\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms$$_system32_21f9a9c4a2f8b514.cdf-ms
24/6/2020 - 13:45:57.825Read1480C:\malware.exeC:\Windows\winsxs\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms$$_system32_21f9a9c4a2f8b514.cdf-ms
24/6/2020 - 13:45:57.825Read1480C:\malware.exeC:\Windows\winsxs\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms$$_system32_21f9a9c4a2f8b514.cdf-ms
24/6/2020 - 13:45:57.825Read1480C:\malware.exeC:\Windows\winsxs\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms$$_system32_21f9a9c4a2f8b514.cdf-ms
24/6/2020 - 13:45:57.825Read1480C:\malware.exeC:\Windows\winsxs\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms$$_system32_21f9a9c4a2f8b514.cdf-ms
24/6/2020 - 13:45:57.825Unknown1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
24/6/2020 - 13:45:57.840Unknown1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
24/6/2020 - 13:45:57.840Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
24/6/2020 - 13:45:57.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe.Local
24/6/2020 - 13:45:57.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
24/6/2020 - 13:45:57.856Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
24/6/2020 - 13:45:57.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
24/6/2020 - 13:45:57.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\msvcr80.dll
24/6/2020 - 13:45:57.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\msvcr80.dll
24/6/2020 - 13:45:57.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\msvcr80.dll
24/6/2020 - 13:45:57.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\
24/6/2020 - 13:45:57.856Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\
24/6/2020 - 13:45:57.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows
24/6/2020 - 13:45:57.856Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows
24/6/2020 - 13:45:57.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
24/6/2020 - 13:45:57.856Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
24/6/2020 - 13:45:57.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
24/6/2020 - 13:45:57.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:45:57.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:45:57.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:45:57.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:45:57.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:45:57.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:45:57.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.config
24/6/2020 - 13:45:57.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
24/6/2020 - 13:45:57.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
24/6/2020 - 13:45:57.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Prefetch\CMD.EXE-AC113AA8.pf
24/6/2020 - 13:45:57.903Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Prefetch\CMD.EXE-AC113AA8.pfCMD.EXE-AC113AA8.pf
24/6/2020 - 13:45:57.903Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Prefetch\CMD.EXE-AC113AA8.pfCMD.EXE-AC113AA8.pf
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exe\Device\HarddiskVolume2
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\AppPatch
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\AppPatch
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\AppPatch
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization\Sorting
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization\Sorting
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization\Sorting
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Temp
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Temp
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Temp
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\ntdll.dll
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\ntdll.dll
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64.dll
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64.dll
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64win.dll
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64win.dll
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64cpu.dll
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64cpu.dll
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\kernel32.dll
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\kernel32.dll
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\kernel32.dll
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\kernel32.dll
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\user32.dll
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\user32.dll
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\ntdll.dll
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\ntdll.dll
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\apisetschema.dll
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\apisetschema.dllapisetschema.dll
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\KernelBase.dll
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\KernelBase.dllKernelBase.dll
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\locale.nls
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\locale.nls
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\msvcrt.dll
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\msvcrt.dll
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\winbrand.dll
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\winbrand.dll
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\user32.dll
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\user32.dll
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\gdi32.dll
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\gdi32.dll
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\lpk.dll
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\lpk.dll
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\usp10.dll
24/6/2020 - 13:45:57.903Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\usp10.dll
24/6/2020 - 13:45:57.903Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\advapi32.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\advapi32.dll
24/6/2020 - 13:45:57.918Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\sechost.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\sechost.dll
24/6/2020 - 13:45:57.918Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\rpcrt4.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\rpcrt4.dll
24/6/2020 - 13:45:57.918Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\sspicli.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\sspicli.dll
24/6/2020 - 13:45:57.918Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cryptbase.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cryptbase.dllcryptbase.dll
24/6/2020 - 13:45:57.918Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:57.918Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\msctf.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\msctf.dll
24/6/2020 - 13:45:57.918Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization\Sorting\SortDefault.nls
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization\Sorting\SortDefault.nlsSortDefault.nls
24/6/2020 - 13:45:57.918Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\apphelp.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\apphelp.dll
24/6/2020 - 13:45:57.918Open2692C:\Windows\SysWOW64\cmd.exeC:\BOOTSECT.EXE
24/6/2020 - 13:45:57.918Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\AppPatch\sysmain.sdb
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\AppPatch\sysmain.sdb
24/6/2020 - 13:45:57.918Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Temp\TMP000000032EDF9B37C5E17B29
24/6/2020 - 13:45:57.918Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:57.918Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\winbrand.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\locale.nls
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization\Sorting\SortDefault.nlsSortDefault.nls
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\AppPatch\sysmain.sdb
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:57.918Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\winbrand.dll
24/6/2020 - 13:45:57.918Open2692C:\Windows\SysWOW64\cmd.exeC:\BOOTSECT.EXE
24/6/2020 - 13:45:57.918Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Temp\TMP000000032EDF9B37C5E17B29
24/6/2020 - 13:45:57.918Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:57.918Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:57.918Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\winbrand.dll
24/6/2020 - 13:45:57.918Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\winbrand.dll
24/6/2020 - 13:45:57.918Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\winbrand.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\ntdll.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64win.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64cpu.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\kernel32.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\kernel32.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\user32.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\ntdll.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\apisetschema.dllapisetschema.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\KernelBase.dllKernelBase.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\msvcrt.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\user32.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\gdi32.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\lpk.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\usp10.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\advapi32.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\sechost.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\rpcrt4.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\sspicli.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cryptbase.dllcryptbase.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\msctf.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\apphelp.dll
24/6/2020 - 13:45:57.918Unknown2692C:\Windows\SysWOW64\cmd.exe\Device\HarddiskVolume2
24/6/2020 - 13:45:57.918Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows
24/6/2020 - 13:45:57.918Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64.dll
24/6/2020 - 13:45:57.918Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64.dll
24/6/2020 - 13:45:57.918Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64win.dll
24/6/2020 - 13:45:57.934Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64win.dll
24/6/2020 - 13:45:57.934Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64cpu.dll
24/6/2020 - 13:45:57.934Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64cpu.dll
24/6/2020 - 13:45:57.934Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64log.dll
24/6/2020 - 13:45:57.934Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows
24/6/2020 - 13:45:57.934Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows
24/6/2020 - 13:45:57.934Open2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
24/6/2020 - 13:45:57.997Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
24/6/2020 - 13:45:57.997Unknown1480C:\malware.exeC:\Windows
24/6/2020 - 13:45:57.997Unknown1480C:\malware.exeC:\Monitor
24/6/2020 - 13:45:57.997Unknown1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
24/6/2020 - 13:45:58.12Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
24/6/2020 - 13:45:58.12Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
24/6/2020 - 13:45:58.12Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
24/6/2020 - 13:45:58.106Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Globalization\Sorting\SortDefault.nls
24/6/2020 - 13:45:58.106Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Globalization\Sorting\SortDefault.nlsSortDefault.nls
24/6/2020 - 13:45:58.106Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot
24/6/2020 - 13:45:58.106Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot
24/6/2020 - 13:45:58.106Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot
24/6/2020 - 13:45:58.106Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming
24/6/2020 - 13:45:58.106Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming
24/6/2020 - 13:45:58.106Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming
24/6/2020 - 13:45:58.106Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
24/6/2020 - 13:45:58.106Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
24/6/2020 - 13:45:58.106Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\index164.dat
24/6/2020 - 13:45:58.106Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
24/6/2020 - 13:45:58.122Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089
24/6/2020 - 13:45:58.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089
24/6/2020 - 13:45:58.137Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089
24/6/2020 - 13:45:58.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
24/6/2020 - 13:45:58.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\
24/6/2020 - 13:45:58.137Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\
24/6/2020 - 13:45:58.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
24/6/2020 - 13:45:58.137Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
24/6/2020 - 13:45:58.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
24/6/2020 - 13:45:58.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows
24/6/2020 - 13:45:58.137Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows
24/6/2020 - 13:45:58.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET
24/6/2020 - 13:45:58.137Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET
24/6/2020 - 13:45:58.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework
24/6/2020 - 13:45:58.137Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework
24/6/2020 - 13:45:58.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
24/6/2020 - 13:45:58.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rpcss.dll
24/6/2020 - 13:45:58.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rpcss.dll
24/6/2020 - 13:45:58.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\uxtheme.dll
24/6/2020 - 13:45:58.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\uxtheme.dll
24/6/2020 - 13:45:58.215Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\winbrand.dll
24/6/2020 - 13:45:58.215Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\winbrand.dll
24/6/2020 - 13:45:58.215Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\sechost.dll
24/6/2020 - 13:45:58.215Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\sechost.dll
24/6/2020 - 13:45:58.215Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:58.215Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:58.215Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:58.215Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:58.215Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:58.215Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:58.231Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
24/6/2020 - 13:45:58.231Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\
24/6/2020 - 13:45:58.231Unknown2692C:\Windows\SysWOW64\cmd.exeC:\
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
24/6/2020 - 13:45:58.231Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
24/6/2020 - 13:45:58.231Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
24/6/2020 - 13:45:58.231Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:58.231Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:58.231Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:58.231Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization\Sorting\SortDefault.nls
24/6/2020 - 13:45:58.231Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization\Sorting\SortDefault.nlsSortDefault.nls
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
24/6/2020 - 13:45:58.231Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\timeout.exe
24/6/2020 - 13:45:58.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\apphelp.dll
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\apphelp.dll
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\AppPatch\sysmain.sdb
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:58.231Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\timeout.exe
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\
24/6/2020 - 13:45:58.231Unknown2692C:\Windows\SysWOW64\cmd.exeC:\
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows
24/6/2020 - 13:45:58.231Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:58.231Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:58.231Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
24/6/2020 - 13:45:58.231Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\timeout.exe
24/6/2020 - 13:45:58.231Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\timeout.exe
24/6/2020 - 13:45:58.231Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\timeout.exe
24/6/2020 - 13:45:58.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.247Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\ui\SwDRM.dll
24/6/2020 - 13:45:58.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.247Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Temporary Internet Files
24/6/2020 - 13:45:58.247Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Temporary Internet Files
24/6/2020 - 13:45:58.247Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.config
24/6/2020 - 13:45:58.247Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
24/6/2020 - 13:45:58.247Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
24/6/2020 - 13:45:58.247Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
24/6/2020 - 13:45:58.247Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
24/6/2020 - 13:45:58.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\l_intl.nls
24/6/2020 - 13:45:58.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
24/6/2020 - 13:45:58.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CRYPTSP.dll
24/6/2020 - 13:45:58.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\cryptsp.dll
24/6/2020 - 13:45:58.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\cryptsp.dll
24/6/2020 - 13:45:58.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
24/6/2020 - 13:45:58.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
24/6/2020 - 13:45:58.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
24/6/2020 - 13:45:58.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
24/6/2020 - 13:45:58.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
24/6/2020 - 13:45:58.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
24/6/2020 - 13:45:58.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
24/6/2020 - 13:45:58.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
24/6/2020 - 13:45:58.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
24/6/2020 - 13:45:58.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
24/6/2020 - 13:45:58.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
24/6/2020 - 13:45:58.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
24/6/2020 - 13:45:58.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\Prefetch\TIMEOUT.EXE-CDF297C7.pf
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\System32\wow64.dll
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\System32\wow64.dll
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\System32\wow64win.dll
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\System32\wow64win.dll
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\System32\wow64cpu.dll
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\System32\wow64cpu.dll
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\System32\wow64log.dll
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows
24/6/2020 - 13:45:58.340Unknown2948C:\Windows\SysWOW64\timeout.exeC:\Windows
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Monitor
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\sechost.dll
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\sechost.dll
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\version.dll
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\version.dll
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\imm32.dll
24/6/2020 - 13:45:58.340Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\pt-BR\timeout.exe.mui
24/6/2020 - 13:45:58.356Read2948C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\pt-BR\timeout.exe.muitimeout.exe.mui
24/6/2020 - 13:45:58.356Read2948C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\timeout.exe
24/6/2020 - 13:45:58.403Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
24/6/2020 - 13:45:58.403Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\timeout.exe
24/6/2020 - 13:45:58.403Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\timeout.exe
24/6/2020 - 13:45:58.403Open2948C:\Windows\SysWOW64\timeout.exeC:\Windows\Globalization\Sorting\SortDefault.nls
24/6/2020 - 13:45:58.403Unknown2948C:\Windows\SysWOW64\timeout.exeC:\Windows\Globalization\Sorting\SortDefault.nlsSortDefault.nls
24/6/2020 - 13:45:58.450Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
24/6/2020 - 13:45:58.637Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
24/6/2020 - 13:45:58.637Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe.Local
24/6/2020 - 13:45:58.637Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
24/6/2020 - 13:45:58.637Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
24/6/2020 - 13:45:58.637Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
24/6/2020 - 13:45:58.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:45:58.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\pubpol4.dat
24/6/2020 - 13:45:58.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC\PublisherPolicy.tme
24/6/2020 - 13:45:58.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.config
24/6/2020 - 13:45:58.668Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
24/6/2020 - 13:45:58.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.config
24/6/2020 - 13:45:58.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
24/6/2020 - 13:45:58.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
24/6/2020 - 13:45:58.668Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
24/6/2020 - 13:45:58.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
24/6/2020 - 13:45:58.668Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:45:58.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
24/6/2020 - 13:45:58.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:45:58.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:45:58.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:45:58.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:45:58.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:45:58.668Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:45:58.778Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dll
24/6/2020 - 13:45:58.918Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:58.918Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dll
24/6/2020 - 13:45:58.918Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:58.965Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.12Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.106Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.153Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.200Unknown2948C:\Windows\SysWOW64\timeout.exeC:\Windows
24/6/2020 - 13:45:59.200Unknown2948C:\Windows\SysWOW64\timeout.exeC:\Monitor
24/6/2020 - 13:45:59.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.247Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:59.247Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:59.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.247Open2692C:\Windows\SysWOW64\cmd.exeC:\
24/6/2020 - 13:45:59.247Unknown2692C:\Windows\SysWOW64\cmd.exeC:\
24/6/2020 - 13:45:59.247Open2692C:\Windows\SysWOW64\cmd.exeC:\malware.exe
24/6/2020 - 13:45:59.247Unknown2692C:\Windows\SysWOW64\cmd.exeC:\malware.exe
24/6/2020 - 13:45:59.247Open2692C:\Windows\SysWOW64\cmd.exeC:\Monitor\Malware
24/6/2020 - 13:45:59.247Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Monitor\Malware
24/6/2020 - 13:45:59.247Open2692C:\Windows\SysWOW64\cmd.exeC:\malware.exe
24/6/2020 - 13:45:59.247Unknown2692C:\Windows\SysWOW64\cmd.exeC:\malware.exe
24/6/2020 - 13:45:59.247Open2692C:\Windows\SysWOW64\cmd.exeC:\Monitor\Malware
24/6/2020 - 13:45:59.247Open2692C:\Windows\SysWOW64\cmd.exeC:\malware.exe
24/6/2020 - 13:45:59.247Open2692C:\Windows\SysWOW64\cmd.exeC:\Monitor\Files\DeletedFiles
24/6/2020 - 13:45:59.247Delete2692C:\Windows\SysWOW64\cmd.exeC:\malware.exe
24/6/2020 - 13:45:59.247Unknown2692C:\Windows\SysWOW64\cmd.exeC:\malware.exe
24/6/2020 - 13:45:59.247Unknown2692C:\Windows\SysWOW64\cmd.exeC:\malware.exe
24/6/2020 - 13:45:59.247Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Monitor\Malware
24/6/2020 - 13:45:59.247Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows
24/6/2020 - 13:45:59.247Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
24/6/2020 - 13:45:59.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.309Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.356Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.403Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.450Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.590Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.731Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.778Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.872Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.918Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:45:59.965Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dll
24/6/2020 - 13:46:0.106Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
24/6/2020 - 13:46:0.106Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dll
24/6/2020 - 13:46:0.106Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
24/6/2020 - 13:46:0.153Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
24/6/2020 - 13:46:0.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
24/6/2020 - 13:46:0.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
24/6/2020 - 13:46:0.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
24/6/2020 - 13:46:0.340Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
24/6/2020 - 13:46:0.387Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
24/6/2020 - 13:46:0.434Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
24/6/2020 - 13:46:0.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
24/6/2020 - 13:46:0.528Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
24/6/2020 - 13:46:0.575Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dll
24/6/2020 - 13:46:0.715Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:0.715Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dll
24/6/2020 - 13:46:0.715Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:0.762Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:0.809Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:0.872Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:0.918Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:0.965Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.12Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.106Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.153Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.340Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.372Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.418Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.512Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.559Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.606Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.653Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.747Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.793Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.840Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.903Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:1.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:2.90Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:2.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:2.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:2.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:2.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:2.325Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089
24/6/2020 - 13:46:2.559Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089
24/6/2020 - 13:46:2.559Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:3.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:3.168Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:3.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089
24/6/2020 - 13:46:3.309Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089
24/6/2020 - 13:46:3.309Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:3.356Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:3.403Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:3.450Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:3.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:3.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:3.590Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a
24/6/2020 - 13:46:3.684Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a
24/6/2020 - 13:46:3.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
24/6/2020 - 13:46:3.731Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
24/6/2020 - 13:46:3.778Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
24/6/2020 - 13:46:3.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
24/6/2020 - 13:46:3.872Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:3.918Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:3.965Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:4.12Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:4.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:4.106Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
24/6/2020 - 13:46:4.153Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:4.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:4.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:4.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:4.340Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:4.387Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:4.434Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:4.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:4.528Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:4.575Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:4.622Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:4.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:4.715Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:4.762Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:4.809Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:4.856Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:4.903Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:4.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:4.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:5.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:5.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:5.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:5.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:5.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:5.325Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:5.372Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:5.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:5.512Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:5.559Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:5.606Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:5.653Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:5.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:5.747Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:5.793Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:5.840Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:5.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:5.934Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:5.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.28Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.75Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.168Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.215Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.309Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.356Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.403Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.450Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.497Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot
24/6/2020 - 13:46:6.497Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot
24/6/2020 - 13:46:6.497Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot
24/6/2020 - 13:46:6.497Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming
24/6/2020 - 13:46:6.497Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming
24/6/2020 - 13:46:6.497Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming
24/6/2020 - 13:46:6.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.590Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.731Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Globalization\pt-br.nlp
24/6/2020 - 13:46:6.731Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.778Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.856Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.903Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
24/6/2020 - 13:46:6.903Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:46:6.903Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:6.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:7.90Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:7.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
24/6/2020 - 13:46:7.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:46:7.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:7.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:46:7.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:46:7.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:46:7.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:46:7.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:46:7.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
24/6/2020 - 13:46:7.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:7.325Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:7.372Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089
24/6/2020 - 13:46:7.372Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
24/6/2020 - 13:46:7.512Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
24/6/2020 - 13:46:7.606Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:7.653Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:7.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:7.747Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:7.793Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:7.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:7.934Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:7.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:8.28Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:8.75Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll
24/6/2020 - 13:46:8.75Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\bcrypt.dll
24/6/2020 - 13:46:8.75Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\bcrypt.dll
24/6/2020 - 13:46:8.75Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\bcrypt.dll
24/6/2020 - 13:46:8.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:8.168Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:8.215Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:8.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:8.309Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:8.356Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:8.403Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:8.450Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:8.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:8.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:8.590Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:8.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:8.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:8.731Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:8.778Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:8.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:8.872Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:8.934Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:8.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:9.28Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:9.75Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:9.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:9.168Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:9.215Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:9.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:9.309Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:9.356Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:9.403Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:9.450Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:9.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:9.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:9.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:9.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:9.731Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:9.778Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:9.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:9.872Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:9.918Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:9.965Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:10.12Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:10.59Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\dwmapi.dll
24/6/2020 - 13:46:10.59Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\dwmapi.dll
24/6/2020 - 13:46:10.59Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\dwmapi.dll
24/6/2020 - 13:46:10.106Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:10.153Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:10.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:10.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:10.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:10.340Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:10.387Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:10.434Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:10.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:10.528Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:10.575Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:10.622Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:10.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:10.715Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:10.762Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:10.809Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:10.856Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:10.903Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:10.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:10.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:11.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:11.90Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:11.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:11.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:11.231Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a
24/6/2020 - 13:46:11.231Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a
24/6/2020 - 13:46:11.372Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a
24/6/2020 - 13:46:11.372Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
24/6/2020 - 13:46:11.418Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:11.418Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
24/6/2020 - 13:46:11.418Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:11.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:11.512Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:11.559Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:11.606Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:11.653Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:11.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:11.747Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:11.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a
24/6/2020 - 13:46:11.793Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a
24/6/2020 - 13:46:11.793Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:11.840Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:11.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:11.934Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:11.981Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
24/6/2020 - 13:46:11.981Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
24/6/2020 - 13:46:11.981Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:11.981Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
24/6/2020 - 13:46:11.981Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:11.981Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:11.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:12.28Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\VERSION.dll
24/6/2020 - 13:46:12.28Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\VERSION.dll
24/6/2020 - 13:46:12.28Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\version.dll
24/6/2020 - 13:46:12.28Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\version.dll
24/6/2020 - 13:46:12.28Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
24/6/2020 - 13:46:12.28Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:12.28Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:12.75Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
24/6/2020 - 13:46:12.75Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:12.75Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:12.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:12.168Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:12.215Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:12.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:12.309Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:12.356Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:12.403Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:12.450Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:12.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:12.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:12.590Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:12.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:12.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:12.731Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:12.778Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:24.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:24.168Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:24.215Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:24.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:24.309Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:24.356Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:24.403Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:24.450Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:24.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:24.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:24.590Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:24.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:24.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:24.731Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:24.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:24.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:24.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:24.825Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll
24/6/2020 - 13:46:24.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:24.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:24.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:24.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:24.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:24.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:24.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:24.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:24.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:24.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:24.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:24.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:24.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:24.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:24.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:24.840Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:24.934Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\RpcRtRemote.dll
24/6/2020 - 13:46:24.934Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\RpcRtRemote.dll
24/6/2020 - 13:46:24.934Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\RpcRtRemote.dllRpcRtRemote.dll
24/6/2020 - 13:46:24.934Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\RpcRtRemote.dll
24/6/2020 - 13:46:24.934Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\RpcRtRemote.dllRpcRtRemote.dll
24/6/2020 - 13:46:24.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:24.981Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.dll
24/6/2020 - 13:46:24.981Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.dll
24/6/2020 - 13:46:24.981Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemcomn.dll
24/6/2020 - 13:46:24.981Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbemcomn.dll
24/6/2020 - 13:46:24.981Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbemcomn.dll
24/6/2020 - 13:46:24.997Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\Logs
24/6/2020 - 13:46:24.997Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\Logs
24/6/2020 - 13:46:24.997Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\advapi32.dll
24/6/2020 - 13:46:24.997Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\advapi32.dll
24/6/2020 - 13:46:24.997Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemprox.dll
24/6/2020 - 13:46:24.997Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemprox.dll
24/6/2020 - 13:46:24.997Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wmiutils.dll
24/6/2020 - 13:46:24.997Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wmiutils.dll
24/6/2020 - 13:46:25.293Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemsvc.dll
24/6/2020 - 13:46:25.293Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemsvc.dll
24/6/2020 - 13:46:25.762Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\fastprox.dll
24/6/2020 - 13:46:25.762Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\fastprox.dll
24/6/2020 - 13:46:25.762Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\NTDSAPI.dll
24/6/2020 - 13:46:25.762Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\ntdsapi.dll
24/6/2020 - 13:46:25.762Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\ntdsapi.dll
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.184Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\SXS.DLL
24/6/2020 - 13:46:26.184Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\sxs.dll
24/6/2020 - 13:46:26.184Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\sxs.dll
24/6/2020 - 13:46:26.184Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
24/6/2020 - 13:46:26.184Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\pt-BR\KernelBase.dll.mui
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:26.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
24/6/2020 - 13:46:26.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
24/6/2020 - 13:46:26.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
24/6/2020 - 13:46:26.200Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\OLEAUT32.dll
24/6/2020 - 13:46:26.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a
24/6/2020 - 13:46:26.668Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a
24/6/2020 - 13:46:26.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
24/6/2020 - 13:46:26.668Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
24/6/2020 - 13:46:26.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
24/6/2020 - 13:46:26.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
24/6/2020 - 13:46:26.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
24/6/2020 - 13:46:26.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
24/6/2020 - 13:46:26.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
24/6/2020 - 13:46:26.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
24/6/2020 - 13:46:26.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
24/6/2020 - 13:46:26.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
24/6/2020 - 13:46:26.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a
24/6/2020 - 13:46:26.668Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a
24/6/2020 - 13:46:26.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
24/6/2020 - 13:46:26.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
24/6/2020 - 13:46:26.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
24/6/2020 - 13:46:26.668Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
24/6/2020 - 13:46:26.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
24/6/2020 - 13:46:26.684Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
24/6/2020 - 13:46:26.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
24/6/2020 - 13:46:26.684Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
24/6/2020 - 13:46:26.684Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
24/6/2020 - 13:46:26.684Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe.Local
24/6/2020 - 13:46:26.684Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
24/6/2020 - 13:46:26.684Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
24/6/2020 - 13:46:26.684Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
24/6/2020 - 13:46:26.684Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
24/6/2020 - 13:46:26.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
24/6/2020 - 13:46:26.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
24/6/2020 - 13:46:26.684Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
24/6/2020 - 13:46:26.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:26.700Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\oleaut32.DLL
24/6/2020 - 13:46:27.543Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dll
24/6/2020 - 13:46:27.543Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a
24/6/2020 - 13:46:27.543Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.559Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:27.606Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:27.653Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.747Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:27.793Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:27.934Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.934Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:27.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:28.28Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:28.75Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:28.122Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
24/6/2020 - 13:46:28.168Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dllWMINet_Utils.dll
24/6/2020 - 13:46:28.168Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
24/6/2020 - 13:46:28.168Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dllWMINet_Utils.dll
24/6/2020 - 13:46:28.215Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dllWMINet_Utils.dll
24/6/2020 - 13:46:28.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dllWMINet_Utils.dll
24/6/2020 - 13:46:28.309Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dllWMINet_Utils.dll
24/6/2020 - 13:46:28.356Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
24/6/2020 - 13:46:28.356Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dllWMINet_Utils.dll
24/6/2020 - 13:46:28.356Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe.Local
24/6/2020 - 13:46:28.356Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
24/6/2020 - 13:46:28.356Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
24/6/2020 - 13:46:28.356Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
24/6/2020 - 13:46:28.356Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dllWMINet_Utils.dll
24/6/2020 - 13:46:28.356Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:28.356Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
24/6/2020 - 13:46:28.872Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\oleaut32.dll
24/6/2020 - 13:46:32.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:32.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:32.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:32.528Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:32.528Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:32.528Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:34.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:34.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:35.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:35.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:35.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:35.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:38.387Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:38.434Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:38.575Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:45.793Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:45.840Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\%insfolder%\%insname%
24/6/2020 - 13:46:57.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:57.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:57.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\tzres.dll
24/6/2020 - 13:46:57.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\tzres.dll
24/6/2020 - 13:46:57.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\tzres.dll
24/6/2020 - 13:46:57.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\tzres.dll
24/6/2020 - 13:46:57.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:57.325Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:57.372Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
24/6/2020 - 13:46:57.372Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:57.418Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:57.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:57.512Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:57.559Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:46:57.606Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:57.653Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
24/6/2020 - 13:46:57.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:57.747Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:57.793Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:57.840Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:57.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:57.934Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:57.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:58.28Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\shfolder.dll
24/6/2020 - 13:46:58.28Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\shfolder.dll
24/6/2020 - 13:46:58.28Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\shfolder.dll
24/6/2020 - 13:46:58.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local
24/6/2020 - 13:46:58.262Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local
24/6/2020 - 13:46:58.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:58.309Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:58.356Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:58.403Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:58.450Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:58.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:58.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:58.590Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:58.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:58.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:58.731Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:58.778Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:58.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\7Star\7Star\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Amigo\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Orbitum\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Sputnik\Sputnik\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\MapleStudio\ChromePlus\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Kometa\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Epic Privacy Browser\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\uCozMedia\Uran\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Vivaldi\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Elements Browser\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\CatalinaGroup\Citrio\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Torch\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Iridium\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\QIP Surf\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Comodo\Dragon\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Opera Software\Opera Stable
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\liebao\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\CentBrowser\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\360Chrome\Chrome\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\CocCoc\Browser\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Chromium\User Data
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer
24/6/2020 - 13:46:58.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Chedot\User Data
24/6/2020 - 13:46:58.950Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Yandex\YandexBrowser\User Data
24/6/2020 - 13:46:58.950Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Coowon\Coowon\User Data
24/6/2020 - 13:46:58.950Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\BraveSoftware\Brave-Browser\User Data
24/6/2020 - 13:46:58.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:58.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:59.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:59.90Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:59.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:59.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:59.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:59.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:59.325Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:59.372Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:59.418Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:59.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:59.512Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:59.559Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:46:59.606Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:59.653Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\8pecxstudios\Cyberfox\profiles.ini
24/6/2020 - 13:46:59.653Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:59.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:59.747Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Globalization\en-us.nlp
24/6/2020 - 13:46:59.747Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.config
24/6/2020 - 13:46:59.747Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
24/6/2020 - 13:46:59.747Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.config
24/6/2020 - 13:46:59.747Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
24/6/2020 - 13:46:59.747Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
24/6/2020 - 13:46:59.747Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:46:59.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089
24/6/2020 - 13:46:59.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089
24/6/2020 - 13:46:59.887Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089
24/6/2020 - 13:46:59.887Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dll
24/6/2020 - 13:46:59.981Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
24/6/2020 - 13:46:59.981Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dll
24/6/2020 - 13:46:59.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
24/6/2020 - 13:47:0.28Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
24/6/2020 - 13:47:0.75Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
24/6/2020 - 13:47:0.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
24/6/2020 - 13:47:0.168Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
24/6/2020 - 13:47:0.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089
24/6/2020 - 13:47:0.215Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089
24/6/2020 - 13:47:0.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dll
24/6/2020 - 13:47:0.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dll
24/6/2020 - 13:47:0.215Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
24/6/2020 - 13:47:0.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dll
24/6/2020 - 13:47:0.215Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
24/6/2020 - 13:47:0.215Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
24/6/2020 - 13:47:0.215Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
24/6/2020 - 13:47:0.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
24/6/2020 - 13:47:0.356Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:0.403Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:0.450Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:0.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:0.543Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\8pecxstudios\Cyberfox\profiles.ini
24/6/2020 - 13:47:0.543Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Mozilla\icecat\profiles.ini
24/6/2020 - 13:47:0.543Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Mozilla\icecat\profiles.ini
24/6/2020 - 13:47:0.606Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:0.653Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:0.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:0.747Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
24/6/2020 - 13:47:0.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\All Users\AppData\Roaming\FlashFXP\3quick.dat
24/6/2020 - 13:47:0.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\ProgramData\APPDATA\ROAMING\FLASHFXP\3QUICK.DAT
24/6/2020 - 13:47:0.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\FTP Navigator\Ftplist.txt
24/6/2020 - 13:47:0.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\FileZilla\recentservers.xml
24/6/2020 - 13:47:0.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Flock\Browser\profiles.ini
24/6/2020 - 13:47:0.809Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:0.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a
24/6/2020 - 13:47:0.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a
24/6/2020 - 13:47:0.903Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a
24/6/2020 - 13:47:0.903Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
24/6/2020 - 13:47:0.950Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dllMicrosoft.VisualBasic.resources.dll
24/6/2020 - 13:47:0.950Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
24/6/2020 - 13:47:0.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dllMicrosoft.VisualBasic.resources.dll
24/6/2020 - 13:47:0.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dllMicrosoft.VisualBasic.resources.dll
24/6/2020 - 13:47:1.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dllMicrosoft.VisualBasic.resources.dll
24/6/2020 - 13:47:1.90Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dllMicrosoft.VisualBasic.resources.dll
24/6/2020 - 13:47:1.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dllMicrosoft.VisualBasic.resources.dll
24/6/2020 - 13:47:1.184Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a
24/6/2020 - 13:47:1.184Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a
24/6/2020 - 13:47:1.184Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
24/6/2020 - 13:47:1.184Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
24/6/2020 - 13:47:1.184Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dllMicrosoft.VisualBasic.resources.dll
24/6/2020 - 13:47:1.184Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
24/6/2020 - 13:47:1.184Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dllMicrosoft.VisualBasic.resources.dll
24/6/2020 - 13:47:1.184Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dllMicrosoft.VisualBasic.resources.dll
24/6/2020 - 13:47:1.231Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Google\Chrome\User Data\
24/6/2020 - 13:47:1.231Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Thunderbird\profiles.ini
24/6/2020 - 13:47:1.231Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Thunderbird\profiles.ini
24/6/2020 - 13:47:1.231Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\NETGATE Technologies\BlackHawk\profiles.ini
24/6/2020 - 13:47:1.231Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\NETGATE Technologies\BlackHawk\profiles.ini
24/6/2020 - 13:47:1.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:1.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:1.325Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Ipswitch\WS_FTP\Sites\ws_ftp.ini
24/6/2020 - 13:47:1.325Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\FTPGetter\servers.xml
24/6/2020 - 13:47:1.325Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Waterfox\profiles.ini
24/6/2020 - 13:47:1.325Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Waterfox\profiles.ini
24/6/2020 - 13:47:1.325Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Moonchild Productions\Pale Moon\profiles.ini
24/6/2020 - 13:47:1.325Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Moonchild Productions\Pale Moon\profiles.ini
24/6/2020 - 13:47:1.325Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Pocomail\accounts.ini
24/6/2020 - 13:47:1.325Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Tencent\QQBrowser\User Data
24/6/2020 - 13:47:1.325Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Tencent\QQBrowser\User Data\Default\EncryptedStorage
24/6/2020 - 13:47:1.340Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Storage
24/6/2020 - 13:47:1.340Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\mail
24/6/2020 - 13:47:1.340Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\VirtualStore\Program Files\Foxmail\mail\
24/6/2020 - 13:47:1.340Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\VirtualStore\Program Files (x86)\Foxmail\mail\
24/6/2020 - 13:47:1.340Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\CoreFTP\sites.idx
24/6/2020 - 13:47:1.340Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:1.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:1.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\mpr.dll
24/6/2020 - 13:47:1.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\mpr.dll
24/6/2020 - 13:47:1.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\scrrun.dll
24/6/2020 - 13:47:1.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\scrrun.dll
24/6/2020 - 13:47:2.43Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
24/6/2020 - 13:47:2.43Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Program Files (x86)
24/6/2020 - 13:47:2.43Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Program Files (x86)
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:47:2.43Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Program Files (x86)\Common Files\Apple\Apple Application Support\plutil.exe
24/6/2020 - 13:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
24/6/2020 - 13:47:2.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.59Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Program Files (x86)\jDownloader\config\database.script
24/6/2020 - 13:47:2.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.122Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Microsoft\Edge\User Data
24/6/2020 - 13:47:2.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.168Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\vaultcli.dll
24/6/2020 - 13:47:2.168Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\vaultcli.dll
24/6/2020 - 13:47:2.168Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\vaultcli.dll
24/6/2020 - 13:47:2.168Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\vaultcli.dll
24/6/2020 - 13:47:2.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:2.950Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Postbox\profiles.ini
24/6/2020 - 13:47:2.950Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Postbox\profiles.ini
24/6/2020 - 13:47:2.950Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\UCBrowser
24/6/2020 - 13:47:2.965Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Monitor\Folder.lst
24/6/2020 - 13:47:2.965Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Trillian\users\global\accounts.dat
24/6/2020 - 13:47:2.965Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Comodo\IceDragon\profiles.ini
24/6/2020 - 13:47:2.965Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Comodo\IceDragon\profiles.ini
24/6/2020 - 13:47:2.965Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\The Bat!
24/6/2020 - 13:47:2.965Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\cftp\Ftplist.txt
24/6/2020 - 13:47:2.965Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Mozilla\SeaMonkey\profiles.ini
24/6/2020 - 13:47:2.965Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Mozilla\SeaMonkey\profiles.ini
24/6/2020 - 13:47:2.965Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dll
24/6/2020 - 13:47:2.965Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.965Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dll
24/6/2020 - 13:47:2.965Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.965Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.965Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.965Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.965Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089
24/6/2020 - 13:47:2.981Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:2.981Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Psi\profiles
24/6/2020 - 13:47:2.997Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Psi+\profiles
24/6/2020 - 13:47:3.90Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:3.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
24/6/2020 - 13:47:3.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
24/6/2020 - 13:47:3.325Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
24/6/2020 - 13:47:3.325Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe.Local
24/6/2020 - 13:47:3.325Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
24/6/2020 - 13:47:3.325Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
24/6/2020 - 13:47:3.325Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
24/6/2020 - 13:47:3.325Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
24/6/2020 - 13:47:3.325Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\pt-BR
24/6/2020 - 13:47:3.325Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\pt-BR\mscorrc.dll
24/6/2020 - 13:47:3.325Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\pt-BR\mscorrc.dll
24/6/2020 - 13:47:3.325Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Mozilla\Firefox\profiles.ini
24/6/2020 - 13:47:3.325Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Mozilla\Firefox\profiles.ini
24/6/2020 - 13:47:3.325Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
24/6/2020 - 13:47:3.340Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Claws-mail
24/6/2020 - 13:47:3.340Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Claws-mail\clawsrc
24/6/2020 - 13:47:3.340Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Opera Mail\Opera Mail\wand.dat
24/6/2020 - 13:47:3.340Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\falkon\profiles\profiles.ini
24/6/2020 - 13:47:3.340Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\K-Meleon\profiles.ini
24/6/2020 - 13:47:3.340Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\K-Meleon\profiles.ini
24/6/2020 - 13:47:3.340Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:3.340Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:3.356Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\SmartFTP\Client 2.0\Favorites\Quick Connect\
24/6/2020 - 13:47:3.356Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:3.356Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\SmartFTP\Client 2.0\Favorites\Quick Connect\
24/6/2020 - 13:47:9.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:47:9.590Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:47:9.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:47:9.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:47:9.731Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:47:9.778Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:47:9.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:47:9.872Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:47:9.918Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:47:9.965Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:47:10.12Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:47:10.106Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:47:10.153Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:47:10.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:47:10.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:47:10.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:47:10.340Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:47:10.387Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:47:10.434Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:47:10.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:47:10.528Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:47:10.575Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
24/6/2020 - 13:47:10.622Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
24/6/2020 - 13:47:17.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
24/6/2020 - 13:47:17.747Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
24/6/2020 - 13:47:17.793Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
24/6/2020 - 13:47:17.840Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll

Process
Trace
24/6/2020 - 13:45:56.715Create1480C:\malware.exe2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
24/6/2020 - 13:45:57.778Create1480C:\malware.exe2692C:\Windows\SysWOW64\cmd.exe
24/6/2020 - 13:45:58.231Create2692C:\Windows\SysWOW64\cmd.exe2948C:\Windows\SysWOW64\timeout.exe
24/6/2020 - 13:45:59.200Terminate2692C:\Windows\SysWOW64\cmd.exe2948C:\Windows\SysWOW64\timeout.exe
24/6/2020 - 13:45:59.247Terminate1480C:\malware.exe2692C:\Windows\SysWOW64\cmd.exe

Analysis
Reason
Timeout

Status
Sucessfully Executed

Results
1

Registry
Trace
24/6/2020 - 13:45:57.575Write1480C:\malware.exeHKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapProxyBypass
24/6/2020 - 13:45:57.575Write1480C:\malware.exeHKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapIntranetName
24/6/2020 - 13:45:57.575Write1480C:\malware.exeHKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapUNCAsIntranet
24/6/2020 - 13:45:57.575Write1480C:\malware.exeHKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapAutoDetect
24/6/2020 - 13:45:57.575Write1480C:\malware.exeHKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapProxyBypass
24/6/2020 - 13:45:57.575Write1480C:\malware.exeHKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapIntranetName
24/6/2020 - 13:45:57.575Write1480C:\malware.exeHKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapUNCAsIntranet
24/6/2020 - 13:45:57.575Write1480C:\malware.exeHKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapAutoDetect

File Summary
Created
Identified: False cancel

Deleted
Identified: True check_circle

Process Summary
Created
Identified: True check_circle

Deleted
Identified: True check_circle

Registry Summary
Proxy
Identified: False cancel

AutoRun
Identified: False cancel

Created
Identified: True check_circle

Deleted
Identified: False cancel

Browsers
Identified: False cancel

Internet
Identified: True check_circle

Loading...

DNS
Query

Response

TCP
Info

UDP
Info

HTTP
Info

Summary
DNS
False cancel

TCP
False cancel

UDP
False cancel

HTTP
False cancel

Results
BINARY
KNN (K=3, NFS-BRMalware)
confidence: 66.67%
suspicious: False cancel

Decision Tree (NFS-BRMalware)
confidence: 100.00%
suspicious: True check_circle

SVC (Kernel=Linear, NFS-BRMalware)
confidence: 96.66%
suspicious: False cancel

MalConv (Ember: Raw Bytes, Threshold=0.5)
confidence: 76.78%
suspicious: False cancel

Random Forest (100 estimators, NFS-BRMalware)
confidence: 70.00%
suspicious: False cancel

Non-Negative MalConv (Ember: Raw Bytes, Threshold=0.35)
confidence: 42.59%
suspicious: True check_circle

LightGDM (Ember: File Characteristics, Threshold=0.8336)
confidence: 51.36%
suspicious: False cancel

Add to Collection
Download