Report #10893 check_circle

  • Creation Date: July 10, 2020, 11:33 p.m.
  • Last Update: July 10, 2020, 11:37 p.m.
  • File: sev 706.exe
  • Results:
Binary
DLL
False cancel
Size
1.34MB
trid
72.3% Win64 Executable
11.8% Win32 Executable
5.3% OS/2 Executable
5.2% Generic Win/DOS Executable
5.2% DOS Executable Generic
type
PE
wordsize
32
Subsystem
Windows GUI
Hashes
md5
4b62a2d2533c835e076e624d4868aa34
sha1
63b38f06177b8d813db73af108243f3e6f62985e
crc32
0xa14c315b
sha224
679e8c715b64601ea3f4dd80d254a44d80e386ad28db42a9227832d0
sha256
4be78840f5c06e36d89a6afecf526e748b42b86bac3cfae36bb0d514c4092b66
sha384
118308e0d442d19456dd53cf73efcc84a78c1b456011647fad65391511d2840b8bd31be03628bef23351804b2f48b2a4
sha512
1bfcc07188454ced0268089185a1c2461d358154544ebaf680898653d0ee8af8f5b7fb10f96ec81fabd87d569714e95c62972381681a53c75b9b54d3425a3472
ssdeep
24576:Stb20pkaCqT5TBWgNQ7aXF/Bdu8OlR72WPM7G6A:fVg5tQ7aXdBmRCW0q5
Community
Google
False cancel
HashLib
False cancel
YARA
Matches
domain, HasDebugData, CRC32_poly_Constant, escalate_priv, HasRichSignature, VC8_Microsoft_Corporation, CRC32_table, network_http, win_files_operation, IsPacked, AutoIT_compiled_script, screenshot, IP, contentis_base64, keylogger, win_token, IsPE32, AutoIt, IsWindowsGUI, inject_thread, anti_dbg, Microsoft_Visual_Cpp_8, win_registry

Suspicious
True check_circle

Strings
List
5O.Pe
1BC.YE
IB.AT
R.sb
1.AG
a.BF
<assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" language="*" processorArchitecture="*" publicKeyToken="6595b64144ccf1df"/>
m.mn
Gt.Ht$
X.Am
A.Fo-#H
WSOCK32.dll
Software\AutoIt v3\AutoIt
COMCTL32.dll
USERENV.dll
VERSION.dll
WININET.dll
WINMM.dll
UxTheme.dll
0.0.0.0
MPR.dll
AUTOITCALLVARIABLE%d
255.255.255.255
SeDebugPrivilege
SeRestorePrivilege
?]+%/
=?Ed?wS
<"t|<%tx<'tt<$tp<&tl<!th<otd<]t`<[t\<\tX<
\Include\
fr-be
fr-ch
fr-ca
%2ekA-
"%us5T
L=I%E
This is a third-party compiled AutoIt script.
BACKSPACE
Spe%F
Hebrew
HOTKEYSET
Include
HOTKEYPRESSED
TaskbarCreated
number is too big
too many forward references
invalid range in character class
closed
failed to get memory
regular expression is too large
\ at end of pattern
\c at end of pattern
two named subpatterns have the same name
BROWSER_SEARCH
HKEY_CLASSES_ROOT
TCPSHUTDOWN
BROWSER_REFRESH
AutoIt has detected the stack has become corrupt.
BROWSER_STOP
BROWSER_FORWARD
BROWSER_BACK
BROWSER_HOME
LAUNCH_MAIL
BROWSER_FAVORTIES
HKEY_LOCAL_MACHINE
Line %d (File "%s"):
VOLUME_UP
VOLUME_DOWN
VOLUME_MUTE
] is an invalid data character in JavaScript compatibility mode
LAUNCH_MEDIA
SOFTWARE\Classes\
Line %d:
TCPLISTEN
FtpOpenFileW
SYSTEM\CurrentControlSet\Control\Nls\Language
FtpGetFileSize
FTPSETPROXY
SW_HIDE
AUTOITWINGETTITLE
GETCURRENTSELECTION
TCPCLOSESOCKET
TCPCONNECT
HTTPSETUSERAGENT
GETSELECTEDCOUNT
GETSELECTED
HTTPSETPROXY
WINGETCLASSLIST
CWM_GETCONTROLNAME
Control Panel\Mouse
Control Panel\Appearance
HttpOpenRequestW
HttpSendRequestW
/AutoIt3OutputDebug
mscoree.dll
LAUNCH_APP2
LAUNCH_APP1
WIN_VISTA
SeShutdownPrivilege
SeBackupPrivilege
SeIncreaseQuotaPrivilege

Foremost
Matches
0.exe, 1 MB
Suspicious
True check_circle
Heuristics
IPs
hasIPs: True check_circle
Allowed: 255.255.255.255, 1, record
Suspicious
hasAllowed: True check_circle
hasSuspicious: False cancel

URLs
Allowed
hasURLs: False cancel
Suspicious
hasAllowed: False cancel
hasSuspicious: False cancel

Files
Allowed: USER32.DLL, kernel32.dll, mscoree.dll, combase.dll, ADVAPI32.dll, OLEAUT32.dll, VERSION.dll, UxTheme.dll, WSOCK32.dll, SHELL32.dll, PSAPI.DLL, COMCTL32.dll, ole32.dll, IPHLPAPI.DLL, WININET.dll, USERENV.dll, WINMM.dll, GDI32.dll, COMDLG32.dll, MPR.dll
hasFiles: True check_circle
Suspicious
hasAllowed: True check_circle
hasSuspicious: False cancel

Binary
Sizes
RVA
RVA: 16
Suspicious: False cancel
Code
Size: 828928
Suspicious: False cancel
Image
Address: 4194304
Suspicious: False cancel
Stack
Stack: 4096
Suspicious: False cancel
Headers
Headers: 1024
Suspicious: False cancel
Suspicious: False cancel

Symbols
Number
Number: 0
Suspicious: True check_circle
Pointer
Pointer: 0
Suspicious: True check_circle
Directories
Number: 16
Suspicious: False cancel

Checksum
Value: 1423879
Suspicous: False cancel

Sections
Allowed: .text, .rdata, .data, .rsrc, .reloc
Suspicious
hasAllowed: True check_circle
hasSections: True check_circle
hasSuspicious: False cancel

Versions
OS
Version: 5
Suspicious: False cancel
Image
Version: True check_circle
Suspicious: 5
Linker
Version: 11.0
Suspicious: False cancel
Subsystem
Version: 5.1
Suspicious: False cancel
Suspicious: False cancel

EntryPoint
Address: 155508
Suspicious: False cancel

Anomalies
Anomalies: The Debug TimeDateStamp(s) and the file header TimeDateStamp do not match.
hasAnomalies: True check_circle

Libraries
Allowed: user32.dll, kernel32.dll, mscoree.dll, combase.dll, advapi32.dll, oleaut32.dll, version.dll, uxtheme.dll, wsock32.dll, shell32.dll, psapi.dll, comctl32.dll, ole32.dll, wininet.dll, userenv.dll, winmm.dll, gdi32.dll, comdlg32.dll, mpr.dll
hasLibs: True check_circle
Suspicious: iphlpapi.dll
hasAllowed: True check_circle
hasSuspicious: True check_circle

Timestamp
Past: False cancel
Valid: True check_circle
Value: 2020-06-17 20:02:25
Future: False cancel

Compilation
Packed: False cancel
Missing: False cancel
Packers
Compiled: True check_circle
Compilers: Microsoft Visual C++ 8, VC8 -> Microsoft Corporation

Obfuscation
XOR: False cancel
Fuzzing: True check_circle

PEDetector
Matches
None
Suspicious
False cancel
Disassembly
hasTricks
True check_circle
Tricks
pushret
.data: 1
.rsrc: 298
.text: 2
.rdata: 10

nopsequence
.text: 1

pushpopmath
.rsrc: 167
.text: 30
.rdata: 6
.reloc: 17

ss register
.rsrc: 2

garbagebytes
.data: 1
.rsrc: 98
.text: 2
.rdata: 5

hookdetection
.rsrc: 9
.rdata: 3
.reloc: 4

stealthimport
.text: 1

software breakpoint
.rsrc: 9
.text: 4
.rdata: 1
.reloc: 5

fakeconditionaljumps
.rsrc: 3

programcontrolflowchange
.data: 1
.rsrc: 95
.text: 2
.rdata: 5

cpuinstructionsresultscomparison
.rsrc: 7
.rdata: 8

AVclass
autoit
1
VirusTotal
md5
4b62a2d2533c835e076e624d4868aa34
sha1
63b38f06177b8d813db73af108243f3e6f62985e
SCANS (DETECTION RATE = 68.06%)
AVG
result: Script:SNH-gen [Trj]
update: 20200702
version: 18.4.3895.0
detected: True check_circle

CMC
update: 20200702
version: 2.7.2019.1
detected: False cancel

MAX
result: malware (ai score=80)
update: 20200702
version: 2019.9.16.1
detected: True check_circle

APEX
result: Malicious
update: 20200701
version: 6.43
detected: True check_circle

Bkav
result: W32.AIDetectVM.malware1
update: 20200702
version: 1.3.0.9899
detected: True check_circle

K7GW
result: Trojan ( 005690a61 )
update: 20200702
version: 11.119.34573
detected: True check_circle

ALYac
result: Trojan.GenericKD.34041950
update: 20200702
version: 1.1.1.5
detected: True check_circle

Avast
result: Script:SNH-gen [Trj]
update: 20200702
version: 18.4.3895.0
detected: True check_circle

Avira
result: TR/AD.AgentTesla.ybjxx
update: 20200702
version: 8.3.3.8
detected: True check_circle

Baidu
update: 20190318
version: 1.0.0.2
detected: False cancel

Cynet
result: Malicious (score: 90)
update: 20200628
version: 4.0.0.24
detected: True check_circle

Cyren
result: W32/AutoIt.OM.gen!Eldorado
update: 20200702
version: 6.3.0.2
detected: True check_circle

DrWeb
result: Trojan.AutoIt.907
update: 20200702
version: 7.0.46.3050
detected: True check_circle

GData
result: Trojan.GenericKD.34041950
update: 20200702
version: A:25.26095B:27.19302
detected: True check_circle

Panda
result: Trj/CI.A
update: 20200702
version: 4.6.4.2
detected: True check_circle

VBA32
update: 20200702
version: 4.4.1
detected: False cancel

VIPRE
result: Trojan.Win32.Generic!BT
update: 20200702
version: 84902
detected: True check_circle

Zoner
update: 20200702
version: 0.0.0.0
detected: False cancel

ClamAV
update: 20200702
version: 0.102.3.0
detected: False cancel

Comodo
update: 20200702
version: 32590
detected: False cancel

F-Prot
update: 20200702
version: 4.7.1.166
detected: False cancel

Ikarus
result: Trojan-Spy.Keylogger.AgentTesla
update: 20200702
version: 0.1.5.2
detected: True check_circle

McAfee
result: Artemis!4B62A2D2533C
update: 20200702
version: 6.0.6.653
detected: True check_circle

Rising
result: Trojan.Obfus/Autoit!1.C075 (CLASSIC)
update: 20200702
version: 25.0.0.26
detected: True check_circle

Sophos
result: Troj/TeslaAg-OM
update: 20200702
version: 4.98.0
detected: True check_circle

Yandex
result: Trojan.Igent.bTWJCe.61
update: 20200630
version: 5.5.2.24
detected: True check_circle

Zillya
update: 20200702
version: 2.0.0.4122
detected: False cancel

Acronis
update: 20200603
version: 1.1.1.76
detected: False cancel

Alibaba
result: TrojanPSW:Win32/Agensla.93982fc0
update: 20190527
version: 0.3.0.5
detected: True check_circle

Arcabit
result: Trojan.Generic.D207705E
update: 20200702
version: 1.0.0.877
detected: True check_circle

Cylance
result: Unsafe
update: 20200702
version: 2.3.1.101
detected: True check_circle

Endgame
result: malicious (high confidence)
update: 20200608
version: 4.0.5
detected: True check_circle

FireEye
result: Generic.mg.4b62a2d2533c835e
update: 20200702
version: 32.31.0.0
detected: True check_circle

Sangfor
update: 20200423
version: 1.0
detected: False cancel

TACHYON
update: 20200702
version: 2020-07-02.03
detected: False cancel

Tencent
result: Msil.Trojan-qqpass.Qqrob.Pefy
update: 20200702
version: 1.0.0.1
detected: True check_circle

ViRobot
update: 20200702
version: 2014.3.20.0
detected: False cancel

Webroot
update: 20200702
version: 1.0.0.403
detected: False cancel

eGambit
result: Unsafe.AI_Score_83%
update: 20200702
detected: True check_circle

Ad-Aware
result: Trojan.GenericKD.34041950
update: 20200702
version: 3.0.5.370
detected: True check_circle

AegisLab
result: Trojan.Multi.Generic.4!c
update: 20200702
version: 4.2
detected: True check_circle

Emsisoft
result: Trojan.GenericKD.34041950 (B)
update: 20200702
version: 2018.12.0.1641
detected: True check_circle

F-Secure
result: Trojan.TR/AD.AgentTesla.ybjxx
update: 20200702
version: 12.0.86.52
detected: True check_circle

Fortinet
result: AutoIt/Injector.FJE!tr
update: 20200702
version: 6.2.142.0
detected: True check_circle

Invincea
result: heuristic
update: 20200502
version: 6.3.6.26157
detected: True check_circle

Jiangmin
update: 20200702
version: 16.0.100
detected: False cancel

Kingsoft
update: 20200702
version: 2013.8.14.323
detected: False cancel

Paloalto
result: generic.ml
update: 20200702
version: 1.0
detected: True check_circle

Symantec
result: Trojan.Gen.MBT
update: 20200702
version: 1.11.0.0
detected: True check_circle

Trapmine
update: 20200619
version: 3.5.0.987
detected: False cancel

AhnLab-V3
update: 20200702
version: 3.18.0.10009
detected: False cancel

Antiy-AVL
update: 20200702
version: 3.0.0.1
detected: False cancel

Kaspersky
result: Trojan-PSW.MSIL.Agensla.rzo
update: 20200702
version: 15.0.1.13
detected: True check_circle

Microsoft
result: Trojan:Win32/Occamy.C4B
update: 20200702
version: 1.1.17200.2
detected: True check_circle

Qihoo-360
result: Generic/Trojan.PSW.96b
update: 20200702
version: 1.0.0.1120
detected: True check_circle

ZoneAlarm
result: Trojan-PSW.MSIL.Agensla.rzo
update: 20200702
version: 1.0
detected: True check_circle

Cybereason
result: malicious.6177b8
update: 20190616
version: 1.2.449
detected: True check_circle

ESET-NOD32
result: a variant of Win32/Injector.Autoit.FJE
update: 20200702
version: 21589
detected: True check_circle

TrendMicro
result: Trojan.Win32.WACATAC.THFBHBO
update: 20200702
version: 11.0.0.1006
detected: True check_circle

BitDefender
result: Trojan.GenericKD.34041950
update: 20200702
version: 7.2
detected: True check_circle

CrowdStrike
result: win/malicious_confidence_70% (W)
update: 20190702
version: 1.0
detected: True check_circle

K7AntiVirus
result: Trojan ( 005690a61 )
update: 20200702
version: 11.119.34577
detected: True check_circle

SentinelOne
update: 20200601
version: 4.3.0.105
detected: False cancel

Avast-Mobile
update: 20200630
version: 200630-00
detected: False cancel

Malwarebytes
result: Trojan.MalPack.AutoIt.Generic
update: 20200702
version: 3.6.4.335
detected: True check_circle

TotalDefense
update: 20200702
version: 37.1.62.1
detected: False cancel

CAT-QuickHeal
result: Trojan.Multi
update: 20200702
version: 14.00
detected: True check_circle

NANO-Antivirus
result: Trojan.Win32.AutoIt.hlgyav
update: 20200702
version: 1.0.134.25119
detected: True check_circle

BitDefenderTheta
update: 20200624
version: 7.2.37796.0
detected: False cancel

MicroWorld-eScan
result: Trojan.GenericKD.34041950
update: 20200702
version: 14.0.409.0
detected: True check_circle

SUPERAntiSpyware
update: 20200701
version: 5.6.0.1032
detected: False cancel

TrendMicro-HouseCall
result: Trojan.Win32.WACATAC.THFBHBO
update: 20200702
version: 10.0.0.1040
detected: True check_circle

total
72
sha256
4be78840f5c06e36d89a6afecf526e748b42b86bac3cfae36bb0d514c4092b66
scan_id
4be78840f5c06e36d89a6afecf526e748b42b86bac3cfae36bb0d514c4092b66-1593702759
resource
4b62a2d2533c835e076e624d4868aa34
positives
49
scan_date
2020-07-02 15:12:39
verbose_msg
Scan finished, information embedded
response_code
1
File
Trace
10/7/2020 - 22:45:42.684Open1480C:\malware.exeC:\dwmapi.dll
10/7/2020 - 22:45:42.684Open1480C:\malware.exeC:\Windows\SysWOW64\dwmapi.dll
10/7/2020 - 22:45:42.684Open1480C:\malware.exeC:\Windows\SysWOW64\dwmapi.dll
10/7/2020 - 22:45:42.684Open1480C:\malware.exeC:\Windows\Globalization\Sorting\SortDefault.nls
10/7/2020 - 22:45:42.684Unknown1480C:\malware.exeC:\Windows\Globalization\Sorting\SortDefault.nlsSortDefault.nls
10/7/2020 - 22:45:42.684Open1480C:\malware.exeC:\Windows\SysWOW64\UxTheme.dll.Config
10/7/2020 - 22:45:42.684Open1480C:\malware.exeC:\Windows\SysWOW64\uxtheme.dll
10/7/2020 - 22:45:42.684Open1480C:\malware.exeC:\malware.exe.Local
10/7/2020 - 22:45:42.684Open1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
10/7/2020 - 22:45:42.684Unknown1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
10/7/2020 - 22:45:42.684Open1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
10/7/2020 - 22:45:42.684Unknown1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
10/7/2020 - 22:45:42.684Open1480C:\malware.exeC:\malware.exe
10/7/2020 - 22:45:42.684Unknown1480C:\malware.exeC:\malware.exe
10/7/2020 - 22:45:42.684Open1480C:\malware.exeC:\
10/7/2020 - 22:45:42.684Unknown1480C:\malware.exeC:\
10/7/2020 - 22:45:42.684Open1480C:\malware.exeC:\Monitor
10/7/2020 - 22:45:42.684Unknown1480C:\malware.exeC:\Monitor
10/7/2020 - 22:45:42.684Open1480C:\malware.exeC:\Monitor\Malware
10/7/2020 - 22:45:42.684Unknown1480C:\malware.exeC:\Monitor\Malware
10/7/2020 - 22:45:56.497Open1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
10/7/2020 - 22:45:56.731Open1480C:\malware.exeC:\Windows\SysWOW64\apphelp.dll
10/7/2020 - 22:45:56.731Open1480C:\malware.exeC:\Windows\SysWOW64\apphelp.dll
10/7/2020 - 22:45:56.731Open1480C:\malware.exeC:\Windows\AppPatch\sysmain.sdb
10/7/2020 - 22:45:56.731Open1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/7/2020 - 22:45:56.731Unknown1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/7/2020 - 22:45:56.731Open1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
10/7/2020 - 22:45:56.731Open1480C:\malware.exeC:\
10/7/2020 - 22:45:56.731Unknown1480C:\malware.exeC:\
10/7/2020 - 22:45:56.731Open1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/7/2020 - 22:45:56.731Unknown1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/7/2020 - 22:45:56.731Open1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/7/2020 - 22:45:56.731Unknown1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/7/2020 - 22:45:56.731Open1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
10/7/2020 - 22:45:56.731Read1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
10/7/2020 - 22:45:56.731Read1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
10/7/2020 - 22:45:56.731Open1480C:\malware.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\ui\SwDRM.dll
10/7/2020 - 22:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Prefetch\MSBUILD.EXE-A2823B68.pf
10/7/2020 - 22:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows
10/7/2020 - 22:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\System32\wow64.dll
10/7/2020 - 22:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\System32\wow64.dll
10/7/2020 - 22:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\System32\wow64win.dll
10/7/2020 - 22:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\System32\wow64win.dll
10/7/2020 - 22:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\System32\wow64cpu.dll
10/7/2020 - 22:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\System32\wow64cpu.dll
10/7/2020 - 22:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\System32\wow64log.dll
10/7/2020 - 22:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows
10/7/2020 - 22:45:56.793Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows
10/7/2020 - 22:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Monitor
10/7/2020 - 22:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\mscoree.dll
10/7/2020 - 22:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\mscoree.dll
10/7/2020 - 22:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\sechost.dll
10/7/2020 - 22:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\sechost.dll
10/7/2020 - 22:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\MSCOREE.DLL.local
10/7/2020 - 22:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/7/2020 - 22:45:56.793Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/7/2020 - 22:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\Upgrades.2.0.50727
10/7/2020 - 22:45:56.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\Upgrades.2.0.50727
10/7/2020 - 22:45:56.809Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:56.809Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:56.809Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:56.809Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:56.809Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:56.809Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:56.809Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.config
10/7/2020 - 22:45:56.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
10/7/2020 - 22:45:56.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
10/7/2020 - 22:45:56.825Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/7/2020 - 22:45:56.825Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/7/2020 - 22:45:56.825Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/7/2020 - 22:45:56.825Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/7/2020 - 22:45:56.825Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
10/7/2020 - 22:45:56.825Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
10/7/2020 - 22:45:56.840Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
10/7/2020 - 22:45:56.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe.Local
10/7/2020 - 22:45:56.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/7/2020 - 22:45:56.856Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/7/2020 - 22:45:56.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/7/2020 - 22:45:56.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\msvcr80.dll
10/7/2020 - 22:45:56.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\msvcr80.dll
10/7/2020 - 22:45:56.918Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\msvcr80.dll
10/7/2020 - 22:45:56.918Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\
10/7/2020 - 22:45:56.918Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\
10/7/2020 - 22:45:56.918Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows
10/7/2020 - 22:45:56.918Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows
10/7/2020 - 22:45:56.918Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/7/2020 - 22:45:56.918Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/7/2020 - 22:45:57.293Open1480C:\malware.exeC:\Monitor
10/7/2020 - 22:45:57.293Unknown1480C:\malware.exeC:\Monitor
10/7/2020 - 22:45:57.340Open1480C:\malware.exeC:\PROPSYS.dll
10/7/2020 - 22:45:57.340Open1480C:\malware.exeC:\Windows\SysWOW64\propsys.dll
10/7/2020 - 22:45:57.340Open1480C:\malware.exeC:\Windows\SysWOW64\propsys.dll
10/7/2020 - 22:45:57.340Open1480C:\malware.exeC:\Windows\SysWOW64\shell32.dll
10/7/2020 - 22:45:57.340Open1480C:\malware.exeC:\malware.exe.Local
10/7/2020 - 22:45:57.340Open1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
10/7/2020 - 22:45:57.340Unknown1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
10/7/2020 - 22:45:57.340Open1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
10/7/2020 - 22:45:57.340Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
10/7/2020 - 22:45:57.340Open1480C:\malware.exeC:\Windows\AppPatch\sysmain.sdb
10/7/2020 - 22:45:57.340Open1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.340Unknown1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.340Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
10/7/2020 - 22:45:57.340Open1480C:\malware.exeC:\
10/7/2020 - 22:45:57.340Unknown1480C:\malware.exeC:\
10/7/2020 - 22:45:57.340Open1480C:\malware.exeC:\Windows
10/7/2020 - 22:45:57.340Unknown1480C:\malware.exeC:\Windows
10/7/2020 - 22:45:57.340Open1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.340Unknown1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.340Open1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.340Unknown1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.340Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
10/7/2020 - 22:45:57.340Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
10/7/2020 - 22:45:57.356Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
10/7/2020 - 22:45:57.356Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
10/7/2020 - 22:45:57.356Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
10/7/2020 - 22:45:57.356Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
10/7/2020 - 22:45:57.356Read1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
10/7/2020 - 22:45:57.356Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
10/7/2020 - 22:45:57.356Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
10/7/2020 - 22:45:57.356Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
10/7/2020 - 22:45:57.356Unknown1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
10/7/2020 - 22:45:57.372Open1480C:\malware.exeC:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
10/7/2020 - 22:45:57.372Unknown1480C:\malware.exeC:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dllapi-ms-win-downlevel-shell32-l1-1-0.dll
10/7/2020 - 22:45:57.372Open1480C:\malware.exeC:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
10/7/2020 - 22:45:57.372Unknown1480C:\malware.exeC:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dllapi-ms-win-downlevel-shell32-l1-1-0.dll
10/7/2020 - 22:45:57.372Open1480C:\malware.exeC:\Windows\SysWOW64\ieframe.dll
10/7/2020 - 22:45:57.418Open1480C:\malware.exeC:\malware.exe.Local
10/7/2020 - 22:45:57.418Open1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
10/7/2020 - 22:45:57.418Unknown1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
10/7/2020 - 22:45:57.418Open1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
10/7/2020 - 22:45:57.418Open1480C:\malware.exeC:\Monitor
10/7/2020 - 22:45:57.418Unknown1480C:\malware.exeC:\Monitor
10/7/2020 - 22:45:57.418Open1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.418Unknown1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.418Open1480C:\malware.exeC:\
10/7/2020 - 22:45:57.418Unknown1480C:\malware.exeC:\
10/7/2020 - 22:45:57.418Open1480C:\malware.exeC:\Windows
10/7/2020 - 22:45:57.418Unknown1480C:\malware.exeC:\Windows
10/7/2020 - 22:45:57.418Open1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.418Unknown1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.481Open1480C:\malware.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Caches
10/7/2020 - 22:45:57.481Open1480C:\malware.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
10/7/2020 - 22:45:57.481Open1480C:\malware.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Caches
10/7/2020 - 22:45:57.481Open1480C:\malware.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
10/7/2020 - 22:45:57.481Open1480C:\malware.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000000.db
10/7/2020 - 22:45:57.481Open1480C:\malware.exeC:\Users\Behemot\Desktop\desktop.ini
10/7/2020 - 22:45:57.481Read1480C:\malware.exeC:\Users\Behemot\Desktop\desktop.ini
10/7/2020 - 22:45:57.481Open1480C:\malware.exeC:\Windows\SysWOW64\propsys.dll
10/7/2020 - 22:45:57.481Open1480C:\malware.exeC:\Windows\SysWOW64\propsys.dll
10/7/2020 - 22:45:57.481Open1480C:\malware.exeC:\Windows\System32\propsys.dll
10/7/2020 - 22:45:57.481Open1480C:\malware.exeC:\Windows\SysWOW64\propsys.dll
10/7/2020 - 22:45:57.481Open1480C:\malware.exeC:\Windows\SysWOW64\propsys.dll
10/7/2020 - 22:45:57.481Open1480C:\malware.exeC:\Windows\System32\propsys.dll
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\Windows\SysWOW64\urlmon.dll
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\Windows\SysWOW64\urlmon.dll
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\Secur32.dll
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\Windows\SysWOW64\secur32.dll
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\Windows\SysWOW64\secur32.dll
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Temporary Internet Files
10/7/2020 - 22:45:57.543Unknown1480C:\malware.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Temporary Internet Files
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\Users\Behemot\AppData\Roaming\Microsoft\Windows\Cookies
10/7/2020 - 22:45:57.543Unknown1480C:\malware.exeC:\Users\Behemot\AppData\Roaming\Microsoft\Windows\Cookies
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\
10/7/2020 - 22:45:57.543Unknown1480C:\malware.exeC:\
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\Windows
10/7/2020 - 22:45:57.543Unknown1480C:\malware.exeC:\Windows
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.543Unknown1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.543Unknown1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\Windows
10/7/2020 - 22:45:57.543Unknown1480C:\malware.exeC:\Windows
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe:Zone.Identifier
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\Monitor
10/7/2020 - 22:45:57.543Unknown1480C:\malware.exeC:\Monitor
10/7/2020 - 22:45:57.543Open1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:57.747Open1480C:\malware.exeC:\Windows\AppPatch\sysmain.sdb
10/7/2020 - 22:45:57.747Open1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.747Unknown1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.747Open1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:57.747Open1480C:\malware.exeC:\
10/7/2020 - 22:45:57.747Unknown1480C:\malware.exeC:\
10/7/2020 - 22:45:57.747Open1480C:\malware.exeC:\Windows
10/7/2020 - 22:45:57.747Unknown1480C:\malware.exeC:\Windows
10/7/2020 - 22:45:57.747Open1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.747Unknown1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.747Open1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.747Unknown1480C:\malware.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.747Open1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:57.747Read1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:57.747Read1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:57.747Read1480C:\malware.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:57.747Open1480C:\malware.exeC:\Windows\SysWOW64\ui\SwDRM.dll
10/7/2020 - 22:45:57.747Open1480C:\malware.exeC:\Windows\SysWOW64\sfc.dll
10/7/2020 - 22:45:57.747Open1480C:\malware.exeC:\Windows\SysWOW64\sfc.dll
10/7/2020 - 22:45:57.747Open1480C:\malware.exeC:\sfc_os.DLL
10/7/2020 - 22:45:57.747Open1480C:\malware.exeC:\Windows\SysWOW64\sfc_os.dll
10/7/2020 - 22:45:57.747Open1480C:\malware.exeC:\Windows\SysWOW64\sfc_os.dll
10/7/2020 - 22:45:57.747Open1480C:\malware.exeC:\Windows\winsxs\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms
10/7/2020 - 22:45:57.747Read1480C:\malware.exeC:\Windows\winsxs\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms$$_system32_21f9a9c4a2f8b514.cdf-ms
10/7/2020 - 22:45:57.747Read1480C:\malware.exeC:\Windows\winsxs\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms$$_system32_21f9a9c4a2f8b514.cdf-ms
10/7/2020 - 22:45:57.747Read1480C:\malware.exeC:\Windows\winsxs\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms$$_system32_21f9a9c4a2f8b514.cdf-ms
10/7/2020 - 22:45:57.747Read1480C:\malware.exeC:\Windows\winsxs\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms$$_system32_21f9a9c4a2f8b514.cdf-ms
10/7/2020 - 22:45:57.747Read1480C:\malware.exeC:\Windows\winsxs\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms$$_system32_21f9a9c4a2f8b514.cdf-ms
10/7/2020 - 22:45:57.747Read1480C:\malware.exeC:\Windows\winsxs\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms$$_system32_21f9a9c4a2f8b514.cdf-ms
10/7/2020 - 22:45:57.747Read1480C:\malware.exeC:\Windows\winsxs\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms$$_system32_21f9a9c4a2f8b514.cdf-ms
10/7/2020 - 22:45:57.762Unknown1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
10/7/2020 - 22:45:57.778Unknown1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
10/7/2020 - 22:45:57.778Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Prefetch\CMD.EXE-AC113AA8.pf
10/7/2020 - 22:45:57.778Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Prefetch\CMD.EXE-AC113AA8.pfCMD.EXE-AC113AA8.pf
10/7/2020 - 22:45:57.778Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Prefetch\CMD.EXE-AC113AA8.pfCMD.EXE-AC113AA8.pf
10/7/2020 - 22:45:57.778Open2692C:\Windows\SysWOW64\cmd.exe\Device\HarddiskVolume2
10/7/2020 - 22:45:57.778Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows
10/7/2020 - 22:45:57.778Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows
10/7/2020 - 22:45:57.778Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows
10/7/2020 - 22:45:57.778Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\AppPatch
10/7/2020 - 22:45:57.778Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\AppPatch
10/7/2020 - 22:45:57.778Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\AppPatch
10/7/2020 - 22:45:57.778Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization
10/7/2020 - 22:45:57.778Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization
10/7/2020 - 22:45:57.778Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization
10/7/2020 - 22:45:57.778Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization\Sorting
10/7/2020 - 22:45:57.778Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization\Sorting
10/7/2020 - 22:45:57.778Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization\Sorting
10/7/2020 - 22:45:57.778Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32
10/7/2020 - 22:45:57.778Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32
10/7/2020 - 22:45:57.778Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32
10/7/2020 - 22:45:57.778Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.778Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.778Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:57.778Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Temp
10/7/2020 - 22:45:57.778Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Temp
10/7/2020 - 22:45:57.778Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Temp
10/7/2020 - 22:45:57.778Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\ntdll.dll
10/7/2020 - 22:45:57.778Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\ntdll.dll
10/7/2020 - 22:45:57.778Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64.dll
10/7/2020 - 22:45:57.778Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64.dll
10/7/2020 - 22:45:57.778Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64win.dll
10/7/2020 - 22:45:57.778Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64win.dll
10/7/2020 - 22:45:57.778Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64cpu.dll
10/7/2020 - 22:45:57.778Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64cpu.dll
10/7/2020 - 22:45:57.778Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\kernel32.dll
10/7/2020 - 22:45:57.778Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\kernel32.dll
10/7/2020 - 22:45:57.778Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\kernel32.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\kernel32.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\user32.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\user32.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\ntdll.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\ntdll.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\apisetschema.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\apisetschema.dllapisetschema.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\KernelBase.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\KernelBase.dllKernelBase.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\locale.nls
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\locale.nls
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\msvcrt.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\msvcrt.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\winbrand.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\winbrand.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\user32.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\user32.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\gdi32.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\gdi32.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\lpk.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\lpk.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\usp10.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\usp10.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\advapi32.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\advapi32.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\sechost.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\sechost.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\rpcrt4.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\rpcrt4.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\sspicli.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\sspicli.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cryptbase.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cryptbase.dllcryptbase.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\msctf.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\msctf.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization\Sorting\SortDefault.nls
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization\Sorting\SortDefault.nlsSortDefault.nls
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\apphelp.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\apphelp.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\BOOTSECT.EXE
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\AppPatch\sysmain.sdb
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\AppPatch\sysmain.sdb
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Temp\TMP000000032EDF9B37C5E17B29
10/7/2020 - 22:45:57.793Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:57.793Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\winbrand.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\locale.nls
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization\Sorting\SortDefault.nlsSortDefault.nls
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\AppPatch\sysmain.sdb
10/7/2020 - 22:45:57.793Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\winbrand.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\BOOTSECT.EXE
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Temp\TMP000000032EDF9B37C5E17B29
10/7/2020 - 22:45:57.793Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:57.793Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:57.793Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\winbrand.dll
10/7/2020 - 22:45:57.793Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\winbrand.dll
10/7/2020 - 22:45:57.793Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\winbrand.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\ntdll.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64win.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64cpu.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\kernel32.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\kernel32.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\user32.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\ntdll.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\apisetschema.dllapisetschema.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\KernelBase.dllKernelBase.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\msvcrt.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\user32.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\gdi32.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\lpk.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\usp10.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\advapi32.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\sechost.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\rpcrt4.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\sspicli.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cryptbase.dllcryptbase.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\msctf.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\apphelp.dll
10/7/2020 - 22:45:57.793Unknown2692C:\Windows\SysWOW64\cmd.exe\Device\HarddiskVolume2
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64win.dll
10/7/2020 - 22:45:57.793Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64win.dll
10/7/2020 - 22:45:57.809Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64cpu.dll
10/7/2020 - 22:45:57.809Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64cpu.dll
10/7/2020 - 22:45:57.809Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\System32\wow64log.dll
10/7/2020 - 22:45:57.809Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows
10/7/2020 - 22:45:57.809Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows
10/7/2020 - 22:45:57.809Open2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
10/7/2020 - 22:45:57.840Unknown1480C:\malware.exeC:\Windows
10/7/2020 - 22:45:57.840Unknown1480C:\malware.exeC:\Monitor
10/7/2020 - 22:45:57.840Unknown1480C:\malware.exeC:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d
10/7/2020 - 22:45:58.12Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\winbrand.dll
10/7/2020 - 22:45:58.12Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\winbrand.dll
10/7/2020 - 22:45:58.12Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\sechost.dll
10/7/2020 - 22:45:58.12Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\sechost.dll
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:58.28Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
10/7/2020 - 22:45:58.28Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\
10/7/2020 - 22:45:58.28Unknown2692C:\Windows\SysWOW64\cmd.exeC:\
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
10/7/2020 - 22:45:58.28Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
10/7/2020 - 22:45:58.28Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
10/7/2020 - 22:45:58.28Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:58.28Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:58.28Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:58.28Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization\Sorting\SortDefault.nls
10/7/2020 - 22:45:58.28Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\Globalization\Sorting\SortDefault.nlsSortDefault.nls
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
10/7/2020 - 22:45:58.28Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\timeout.exe
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\apphelp.dll
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\apphelp.dll
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\AppPatch\sysmain.sdb
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:58.28Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\timeout.exe
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\
10/7/2020 - 22:45:58.28Unknown2692C:\Windows\SysWOW64\cmd.exeC:\
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows
10/7/2020 - 22:45:58.28Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:58.28Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:58.28Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64
10/7/2020 - 22:45:58.28Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\timeout.exe
10/7/2020 - 22:45:58.28Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\timeout.exe
10/7/2020 - 22:45:58.28Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\timeout.exe
10/7/2020 - 22:45:58.43Open2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\ui\SwDRM.dll
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\Prefetch\TIMEOUT.EXE-CDF297C7.pf
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\System32\wow64.dll
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\System32\wow64.dll
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\System32\wow64win.dll
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\System32\wow64win.dll
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\System32\wow64cpu.dll
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\System32\wow64cpu.dll
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\System32\wow64log.dll
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows
10/7/2020 - 22:45:58.90Unknown1928C:\Windows\SysWOW64\timeout.exeC:\Windows
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Monitor
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\sechost.dll
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\sechost.dll
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\version.dll
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\version.dll
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\imm32.dll
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\pt-BR\timeout.exe.mui
10/7/2020 - 22:45:58.90Read1928C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\pt-BR\timeout.exe.muitimeout.exe.mui
10/7/2020 - 22:45:58.90Read1928C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\timeout.exe
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\timeout.exe
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\SysWOW64\timeout.exe
10/7/2020 - 22:45:58.90Open1928C:\Windows\SysWOW64\timeout.exeC:\Windows\Globalization\Sorting\SortDefault.nls
10/7/2020 - 22:45:58.90Unknown1928C:\Windows\SysWOW64\timeout.exeC:\Windows\Globalization\Sorting\SortDefault.nlsSortDefault.nls
10/7/2020 - 22:45:59.153Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
10/7/2020 - 22:45:59.153Unknown1928C:\Windows\SysWOW64\timeout.exeC:\Windows
10/7/2020 - 22:45:59.153Unknown1928C:\Windows\SysWOW64\timeout.exeC:\Monitor
10/7/2020 - 22:45:59.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:45:59.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:45:59.200Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:59.200Read2692C:\Windows\SysWOW64\cmd.exeC:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:59.200Open2692C:\Windows\SysWOW64\cmd.exeC:\
10/7/2020 - 22:45:59.200Unknown2692C:\Windows\SysWOW64\cmd.exeC:\
10/7/2020 - 22:45:59.200Open2692C:\Windows\SysWOW64\cmd.exeC:\malware.exe
10/7/2020 - 22:45:59.200Unknown2692C:\Windows\SysWOW64\cmd.exeC:\malware.exe
10/7/2020 - 22:45:59.200Open2692C:\Windows\SysWOW64\cmd.exeC:\Monitor\Malware
10/7/2020 - 22:45:59.200Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Monitor\Malware
10/7/2020 - 22:45:59.200Open2692C:\Windows\SysWOW64\cmd.exeC:\malware.exe
10/7/2020 - 22:45:59.200Unknown2692C:\Windows\SysWOW64\cmd.exeC:\malware.exe
10/7/2020 - 22:45:59.200Open2692C:\Windows\SysWOW64\cmd.exeC:\Monitor\Malware
10/7/2020 - 22:45:59.200Open2692C:\Windows\SysWOW64\cmd.exeC:\malware.exe
10/7/2020 - 22:45:59.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:45:59.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:45:59.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:45:59.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:45:59.200Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.config
10/7/2020 - 22:45:59.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
10/7/2020 - 22:45:59.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
10/7/2020 - 22:45:59.200Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
10/7/2020 - 22:45:59.200Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
10/7/2020 - 22:45:59.200Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
10/7/2020 - 22:45:59.200Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
10/7/2020 - 22:45:59.200Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
10/7/2020 - 22:45:59.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Globalization\Sorting\SortDefault.nls
10/7/2020 - 22:45:59.215Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Globalization\Sorting\SortDefault.nlsSortDefault.nls
10/7/2020 - 22:45:59.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot
10/7/2020 - 22:45:59.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot
10/7/2020 - 22:45:59.215Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot
10/7/2020 - 22:45:59.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming
10/7/2020 - 22:45:59.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming
10/7/2020 - 22:45:59.215Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming
10/7/2020 - 22:45:59.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
10/7/2020 - 22:45:59.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
10/7/2020 - 22:45:59.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\index164.dat
10/7/2020 - 22:45:59.450Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
10/7/2020 - 22:45:59.590Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:45:59.590Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
10/7/2020 - 22:45:59.590Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:45:59.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:45:59.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:45:59.731Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:45:59.778Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:45:59.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:45:59.872Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:45:59.918Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:45:59.965Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.12Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.106Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.153Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.340Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.387Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.434Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.528Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.575Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.622Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.715Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.762Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.809Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.856Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.903Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:0.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:1.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:1.90Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:1.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:1.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:1.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:1.325Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:1.418Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089
10/7/2020 - 22:46:1.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089
10/7/2020 - 22:46:1.512Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089
10/7/2020 - 22:46:1.512Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:1.559Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:1.606Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:1.653Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:1.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:1.747Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:1.793Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:1.840Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:1.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:1.934Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:1.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.28Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.168Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
10/7/2020 - 22:46:2.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\
10/7/2020 - 22:46:2.215Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\
10/7/2020 - 22:46:2.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/7/2020 - 22:46:2.215Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/7/2020 - 22:46:2.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
10/7/2020 - 22:46:2.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows
10/7/2020 - 22:46:2.215Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows
10/7/2020 - 22:46:2.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET
10/7/2020 - 22:46:2.215Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET
10/7/2020 - 22:46:2.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework
10/7/2020 - 22:46:2.215Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework
10/7/2020 - 22:46:2.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
10/7/2020 - 22:46:2.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rpcss.dll
10/7/2020 - 22:46:2.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rpcss.dll
10/7/2020 - 22:46:2.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\uxtheme.dll
10/7/2020 - 22:46:2.215Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\uxtheme.dll
10/7/2020 - 22:46:2.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Temporary Internet Files
10/7/2020 - 22:46:2.262Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Temporary Internet Files
10/7/2020 - 22:46:2.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.config
10/7/2020 - 22:46:2.262Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
10/7/2020 - 22:46:2.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
10/7/2020 - 22:46:2.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/7/2020 - 22:46:2.262Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/7/2020 - 22:46:2.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\l_intl.nls
10/7/2020 - 22:46:2.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
10/7/2020 - 22:46:2.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CRYPTSP.dll
10/7/2020 - 22:46:2.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\cryptsp.dll
10/7/2020 - 22:46:2.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\cryptsp.dll
10/7/2020 - 22:46:2.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
10/7/2020 - 22:46:2.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
10/7/2020 - 22:46:2.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
10/7/2020 - 22:46:2.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
10/7/2020 - 22:46:2.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
10/7/2020 - 22:46:2.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
10/7/2020 - 22:46:2.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
10/7/2020 - 22:46:2.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
10/7/2020 - 22:46:2.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
10/7/2020 - 22:46:2.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
10/7/2020 - 22:46:2.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
10/7/2020 - 22:46:2.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\rsaenh.dll
10/7/2020 - 22:46:2.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
10/7/2020 - 22:46:2.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
10/7/2020 - 22:46:2.293Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
10/7/2020 - 22:46:2.293Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe.Local
10/7/2020 - 22:46:2.293Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/7/2020 - 22:46:2.293Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/7/2020 - 22:46:2.293Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/7/2020 - 22:46:2.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:2.637Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\pubpol4.dat
10/7/2020 - 22:46:2.637Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC\PublisherPolicy.tme
10/7/2020 - 22:46:2.637Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.config
10/7/2020 - 22:46:2.637Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
10/7/2020 - 22:46:2.637Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.config
10/7/2020 - 22:46:2.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
10/7/2020 - 22:46:2.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
10/7/2020 - 22:46:2.637Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
10/7/2020 - 22:46:2.637Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:46:2.637Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
10/7/2020 - 22:46:2.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:46:2.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:46:2.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:46:2.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:46:2.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:46:2.684Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dll
10/7/2020 - 22:46:2.825Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:2.825Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dll
10/7/2020 - 22:46:2.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:2.872Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:2.918Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:2.965Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.12Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.106Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.153Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.340Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.387Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.434Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.528Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.575Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.622Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.715Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.762Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.809Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.872Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:3.918Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dll
10/7/2020 - 22:46:4.59Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/7/2020 - 22:46:4.59Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dll
10/7/2020 - 22:46:4.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/7/2020 - 22:46:4.106Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/7/2020 - 22:46:4.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/7/2020 - 22:46:4.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/7/2020 - 22:46:4.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/7/2020 - 22:46:4.325Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/7/2020 - 22:46:4.372Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/7/2020 - 22:46:4.418Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/7/2020 - 22:46:4.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/7/2020 - 22:46:4.512Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/7/2020 - 22:46:4.559Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dll
10/7/2020 - 22:46:4.700Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:4.700Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dll
10/7/2020 - 22:46:4.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:4.747Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:4.793Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:4.840Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:4.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:4.934Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:4.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.28Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.106Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.325Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.372Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.418Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.512Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.559Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.606Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.653Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.747Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.793Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.840Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.934Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:5.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:6.28Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:6.75Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:6.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:6.168Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:6.215Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:6.262Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089
10/7/2020 - 22:46:6.497Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089
10/7/2020 - 22:46:6.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:7.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:7.106Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:7.153Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089
10/7/2020 - 22:46:7.247Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089
10/7/2020 - 22:46:7.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:7.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:7.340Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:7.387Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:7.434Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:7.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:7.528Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a
10/7/2020 - 22:46:7.622Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a
10/7/2020 - 22:46:7.622Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/7/2020 - 22:46:7.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/7/2020 - 22:46:7.715Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/7/2020 - 22:46:7.762Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/7/2020 - 22:46:7.809Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:7.856Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:7.903Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:7.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:7.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:8.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/7/2020 - 22:46:8.90Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:8.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:8.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:8.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:8.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:8.325Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:8.372Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:8.418Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:8.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:8.512Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:8.559Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:8.606Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:8.653Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:8.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:8.747Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:8.793Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:8.840Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:8.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:8.934Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:8.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:9.75Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:9.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:9.168Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:9.215Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:9.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:9.309Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:9.356Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:9.403Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:9.450Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:9.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:9.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:9.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:9.590Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:9.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:9.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:9.731Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:9.778Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:9.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:9.872Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:9.918Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:9.965Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.12Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.106Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.153Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.340Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot
10/7/2020 - 22:46:10.340Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot
10/7/2020 - 22:46:10.340Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot
10/7/2020 - 22:46:10.340Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming
10/7/2020 - 22:46:10.340Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming
10/7/2020 - 22:46:10.340Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming
10/7/2020 - 22:46:10.340Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.387Open2692C:\Windows\SysWOW64\cmd.exeC:\Monitor\Files\DeletedFiles
10/7/2020 - 22:46:10.387Delete2692C:\Windows\SysWOW64\cmd.exeC:\malware.exe
10/7/2020 - 22:46:10.387Unknown2692C:\Windows\SysWOW64\cmd.exeC:\malware.exe
10/7/2020 - 22:46:10.387Unknown2692C:\Windows\SysWOW64\cmd.exeC:\malware.exe
10/7/2020 - 22:46:10.387Unknown2692C:\Windows\SysWOW64\cmd.exeC:\malware.exe
10/7/2020 - 22:46:10.387Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Monitor\Malware
10/7/2020 - 22:46:10.387Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Windows
10/7/2020 - 22:46:10.387Unknown2692C:\Windows\SysWOW64\cmd.exeC:\Monitor
10/7/2020 - 22:46:10.387Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.450Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.590Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Globalization\pt-br.nlp
10/7/2020 - 22:46:10.590Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.731Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
10/7/2020 - 22:46:10.731Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:46:10.731Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.778Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.872Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.918Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:10.965Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
10/7/2020 - 22:46:10.965Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:46:11.12Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:11.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:46:11.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:46:11.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:46:11.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:46:11.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:46:11.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/7/2020 - 22:46:11.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:11.153Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:11.200Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089
10/7/2020 - 22:46:11.200Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
10/7/2020 - 22:46:11.340Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
10/7/2020 - 22:46:11.434Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:11.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:11.528Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:11.575Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:11.622Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:11.715Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:11.762Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:11.809Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:11.856Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:11.903Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll
10/7/2020 - 22:46:11.903Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\bcrypt.dll
10/7/2020 - 22:46:11.903Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\bcrypt.dll
10/7/2020 - 22:46:11.903Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\bcrypt.dll
10/7/2020 - 22:46:11.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:11.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:12.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:12.90Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:12.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:12.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:12.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:12.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:12.325Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:12.372Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:12.418Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:12.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:12.512Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:12.559Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:12.606Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:12.653Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:12.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:12.747Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:12.793Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:12.840Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:12.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:12.934Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:12.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:13.28Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:13.75Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:13.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:13.168Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:13.215Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:13.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:13.309Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:13.356Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:13.450Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:13.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:13.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:13.590Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:13.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:13.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:13.731Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:13.778Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:13.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:13.872Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\dwmapi.dll
10/7/2020 - 22:46:13.872Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\dwmapi.dll
10/7/2020 - 22:46:13.872Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\dwmapi.dll
10/7/2020 - 22:46:13.918Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:13.965Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:14.12Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:14.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:14.106Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:14.153Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:14.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:14.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:14.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:14.340Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:14.387Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:14.434Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:14.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:14.528Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:14.575Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:14.622Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:14.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:14.715Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:14.762Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:14.809Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:14.856Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:14.903Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:14.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:14.997Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a
10/7/2020 - 22:46:14.997Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a
10/7/2020 - 22:46:15.137Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a
10/7/2020 - 22:46:15.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
10/7/2020 - 22:46:15.184Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.184Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
10/7/2020 - 22:46:15.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.325Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.372Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.418Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.512Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.559Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a
10/7/2020 - 22:46:15.559Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a
10/7/2020 - 22:46:15.559Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.606Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.653Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.747Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
10/7/2020 - 22:46:15.747Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
10/7/2020 - 22:46:15.747Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.747Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
10/7/2020 - 22:46:15.747Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.747Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.747Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\VERSION.dll
10/7/2020 - 22:46:15.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\VERSION.dll
10/7/2020 - 22:46:15.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\version.dll
10/7/2020 - 22:46:15.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\version.dll
10/7/2020 - 22:46:15.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
10/7/2020 - 22:46:15.793Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.793Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.840Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
10/7/2020 - 22:46:15.840Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.840Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.934Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:15.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:16.28Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:16.75Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:16.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:16.168Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:16.215Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:16.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:16.309Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:16.356Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:16.403Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:16.450Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:16.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:16.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:16.590Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:27.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:28.28Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:28.75Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:28.122Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:28.168Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:28.215Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:28.262Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:28.309Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:28.356Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:28.403Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:28.450Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:28.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:28.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:28.590Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:28.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:28.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:28.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:28.684Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll
10/7/2020 - 22:46:28.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:28.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:28.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:28.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:28.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:28.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:28.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:28.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:28.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:28.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:28.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:28.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:28.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:28.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:28.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:28.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:28.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\RpcRtRemote.dll
10/7/2020 - 22:46:28.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\RpcRtRemote.dll
10/7/2020 - 22:46:28.793Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\RpcRtRemote.dllRpcRtRemote.dll
10/7/2020 - 22:46:28.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\RpcRtRemote.dll
10/7/2020 - 22:46:28.793Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\RpcRtRemote.dllRpcRtRemote.dll
10/7/2020 - 22:46:28.840Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:28.840Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.dll
10/7/2020 - 22:46:28.840Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.dll
10/7/2020 - 22:46:28.840Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemcomn.dll
10/7/2020 - 22:46:28.840Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbemcomn.dll
10/7/2020 - 22:46:28.840Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbemcomn.dll
10/7/2020 - 22:46:28.840Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\Logs
10/7/2020 - 22:46:28.840Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\Logs
10/7/2020 - 22:46:28.840Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\advapi32.dll
10/7/2020 - 22:46:28.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\advapi32.dll
10/7/2020 - 22:46:28.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemprox.dll
10/7/2020 - 22:46:28.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemprox.dll
10/7/2020 - 22:46:28.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wmiutils.dll
10/7/2020 - 22:46:28.856Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wmiutils.dll
10/7/2020 - 22:46:29.90Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemsvc.dll
10/7/2020 - 22:46:29.90Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemsvc.dll
10/7/2020 - 22:46:29.559Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\fastprox.dll
10/7/2020 - 22:46:29.559Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\fastprox.dll
10/7/2020 - 22:46:29.559Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\NTDSAPI.dll
10/7/2020 - 22:46:29.559Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\ntdsapi.dll
10/7/2020 - 22:46:29.559Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\ntdsapi.dll
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.981Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\SXS.DLL
10/7/2020 - 22:46:29.981Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\sxs.dll
10/7/2020 - 22:46:29.981Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\sxs.dll
10/7/2020 - 22:46:29.981Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
10/7/2020 - 22:46:29.981Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\pt-BR\KernelBase.dll.mui
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.981Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:29.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/7/2020 - 22:46:29.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:29.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
10/7/2020 - 22:46:29.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wbem\wbemdisp.tlb
10/7/2020 - 22:46:29.997Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\OLEAUT32.dll
10/7/2020 - 22:46:30.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:30.465Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a
10/7/2020 - 22:46:30.465Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a
10/7/2020 - 22:46:30.465Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
10/7/2020 - 22:46:30.465Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
10/7/2020 - 22:46:30.465Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
10/7/2020 - 22:46:30.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
10/7/2020 - 22:46:30.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
10/7/2020 - 22:46:30.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
10/7/2020 - 22:46:30.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
10/7/2020 - 22:46:30.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
10/7/2020 - 22:46:30.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
10/7/2020 - 22:46:30.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
10/7/2020 - 22:46:30.465Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a
10/7/2020 - 22:46:30.465Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a
10/7/2020 - 22:46:30.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
10/7/2020 - 22:46:30.465Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
10/7/2020 - 22:46:30.465Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
10/7/2020 - 22:46:30.465Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
10/7/2020 - 22:46:30.465Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
10/7/2020 - 22:46:30.465Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
10/7/2020 - 22:46:30.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
10/7/2020 - 22:46:30.465Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
10/7/2020 - 22:46:30.481Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
10/7/2020 - 22:46:30.481Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe.Local
10/7/2020 - 22:46:30.481Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/7/2020 - 22:46:30.481Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/7/2020 - 22:46:30.481Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/7/2020 - 22:46:30.481Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
10/7/2020 - 22:46:30.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
10/7/2020 - 22:46:30.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
10/7/2020 - 22:46:30.481Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dllCustomMarshalers.dll
10/7/2020 - 22:46:30.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:30.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:30.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:30.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:30.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:30.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:30.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:30.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:30.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:30.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:30.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:30.497Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\oleaut32.DLL
10/7/2020 - 22:46:31.465Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dll
10/7/2020 - 22:46:31.465Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.465Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dll
10/7/2020 - 22:46:31.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.465Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a
10/7/2020 - 22:46:31.465Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a
10/7/2020 - 22:46:31.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:31.528Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:31.575Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.622Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:31.715Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:31.856Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.856Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.903Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:31.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:32.43Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
10/7/2020 - 22:46:32.90Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dllWMINet_Utils.dll
10/7/2020 - 22:46:32.90Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
10/7/2020 - 22:46:32.90Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dllWMINet_Utils.dll
10/7/2020 - 22:46:32.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dllWMINet_Utils.dll
10/7/2020 - 22:46:32.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dllWMINet_Utils.dll
10/7/2020 - 22:46:32.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dllWMINet_Utils.dll
10/7/2020 - 22:46:32.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
10/7/2020 - 22:46:32.278Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dllWMINet_Utils.dll
10/7/2020 - 22:46:32.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe.Local
10/7/2020 - 22:46:32.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/7/2020 - 22:46:32.278Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/7/2020 - 22:46:32.278Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/7/2020 - 22:46:32.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dllWMINet_Utils.dll
10/7/2020 - 22:46:32.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:32.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fdef4c991303c17ece877574f240249f\System.Management.ni.dllSystem.Management.ni.dll
10/7/2020 - 22:46:32.793Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\oleaut32.dll
10/7/2020 - 22:46:35.903Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:35.903Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:35.903Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:35.903Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:35.903Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:35.903Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:37.590Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:37.590Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:38.762Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:38.762Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:38.762Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:38.762Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:46:41.840Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:41.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:42.28Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:46:49.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:46:49.293Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\%insfolder%\%insname%
10/7/2020 - 22:47:0.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:0.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:0.731Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\tzres.dll
10/7/2020 - 22:47:0.731Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\tzres.dll
10/7/2020 - 22:47:0.731Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\tzres.dll
10/7/2020 - 22:47:0.731Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\tzres.dll
10/7/2020 - 22:47:0.731Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:0.778Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:0.825Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
10/7/2020 - 22:47:0.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:0.872Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:0.918Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:0.965Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:1.12Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:47:1.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:1.106Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/7/2020 - 22:47:1.153Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:1.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:1.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:1.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:1.340Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:1.387Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:1.434Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:1.481Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\shfolder.dll
10/7/2020 - 22:47:1.481Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\shfolder.dll
10/7/2020 - 22:47:1.481Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\shfolder.dll
10/7/2020 - 22:47:1.715Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local
10/7/2020 - 22:47:1.715Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local
10/7/2020 - 22:47:1.715Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:1.762Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:1.809Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:1.856Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:1.903Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:1.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:1.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:2.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:2.90Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:2.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:2.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:2.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:2.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\7Star\7Star\User Data
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Chromium\User Data
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\QIP Surf\User Data
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Iridium\User Data
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Epic Privacy Browser\User Data
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Orbitum\User Data
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\BraveSoftware\Brave-Browser\User Data
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\liebao\User Data
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Coowon\Coowon\User Data
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Yandex\YandexBrowser\User Data
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\uCozMedia\Uran\User Data
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Sputnik\Sputnik\User Data
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Chedot\User Data
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Comodo\Dragon\User Data
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Opera Software\Opera Stable
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Torch\User Data
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Vivaldi\User Data
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Elements Browser\User Data
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Amigo\User Data
10/7/2020 - 22:47:2.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer
10/7/2020 - 22:47:2.403Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Kometa\User Data
10/7/2020 - 22:47:2.403Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\CatalinaGroup\Citrio\User Data
10/7/2020 - 22:47:2.403Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\MapleStudio\ChromePlus\User Data
10/7/2020 - 22:47:2.403Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\CentBrowser\User Data
10/7/2020 - 22:47:2.403Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\360Chrome\Chrome\User Data
10/7/2020 - 22:47:2.403Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\CocCoc\Browser\User Data
10/7/2020 - 22:47:2.403Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\FTPGetter\servers.xml
10/7/2020 - 22:47:2.403Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:2.450Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:2.497Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:2.543Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:2.590Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:2.637Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:2.684Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:2.731Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:2.778Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:2.825Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:2.872Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:2.918Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:2.965Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\falkon\profiles\profiles.ini
10/7/2020 - 22:47:2.965Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:3.12Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:3.59Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Globalization\en-us.nlp
10/7/2020 - 22:47:3.59Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.config
10/7/2020 - 22:47:3.59Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
10/7/2020 - 22:47:3.59Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.config
10/7/2020 - 22:47:3.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
10/7/2020 - 22:47:3.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\msbuild.exe.configmsbuild.exe.config
10/7/2020 - 22:47:3.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:3.106Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089
10/7/2020 - 22:47:3.106Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089
10/7/2020 - 22:47:3.200Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089
10/7/2020 - 22:47:3.200Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dll
10/7/2020 - 22:47:3.293Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/7/2020 - 22:47:3.293Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dll
10/7/2020 - 22:47:3.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/7/2020 - 22:47:3.340Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/7/2020 - 22:47:3.387Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/7/2020 - 22:47:3.434Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/7/2020 - 22:47:3.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/7/2020 - 22:47:3.528Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089
10/7/2020 - 22:47:3.528Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089
10/7/2020 - 22:47:3.528Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dll
10/7/2020 - 22:47:3.528Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dll
10/7/2020 - 22:47:3.528Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/7/2020 - 22:47:3.528Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dll
10/7/2020 - 22:47:3.528Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/7/2020 - 22:47:3.528Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/7/2020 - 22:47:3.528Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/7/2020 - 22:47:3.575Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/7/2020 - 22:47:3.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:3.715Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:3.762Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:3.809Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:3.856Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:3.903Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:3.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:3.997Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Waterfox\profiles.ini
10/7/2020 - 22:47:3.997Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Waterfox\profiles.ini
10/7/2020 - 22:47:3.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:4.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:4.90Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Ipswitch\WS_FTP\Sites\ws_ftp.ini
10/7/2020 - 22:47:4.90Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Mozilla\SeaMonkey\profiles.ini
10/7/2020 - 22:47:4.90Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Mozilla\SeaMonkey\profiles.ini
10/7/2020 - 22:47:4.90Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\FTP Navigator\Ftplist.txt
10/7/2020 - 22:47:4.90Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Program Files (x86)
10/7/2020 - 22:47:4.90Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Program Files (x86)
10/7/2020 - 22:47:4.90Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:4.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Program Files (x86)\Common Files\Apple\Apple Application Support\plutil.exe
10/7/2020 - 22:47:4.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:4.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:4.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:4.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/7/2020 - 22:47:4.325Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/7/2020 - 22:47:4.372Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:4.418Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:4.465Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Pocomail\accounts.ini
10/7/2020 - 22:47:4.465Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\K-Meleon\profiles.ini
10/7/2020 - 22:47:4.465Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\K-Meleon\profiles.ini
10/7/2020 - 22:47:4.465Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\cftp\Ftplist.txt
10/7/2020 - 22:47:4.465Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Thunderbird\profiles.ini
10/7/2020 - 22:47:4.465Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Thunderbird\profiles.ini
10/7/2020 - 22:47:4.481Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Storage
10/7/2020 - 22:47:4.481Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\mail
10/7/2020 - 22:47:4.481Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\VirtualStore\Program Files\Foxmail\mail\
10/7/2020 - 22:47:4.481Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\VirtualStore\Program Files (x86)\Foxmail\mail\
10/7/2020 - 22:47:4.481Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\The Bat!
10/7/2020 - 22:47:4.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:4.528Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:4.575Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:4.622Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:4.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:4.715Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:4.762Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:4.809Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:4.856Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:4.903Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:4.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:4.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:5.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:5.90Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Microsoft\Edge\User Data
10/7/2020 - 22:47:5.90Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:5.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\vaultcli.dll
10/7/2020 - 22:47:5.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\vaultcli.dll
10/7/2020 - 22:47:5.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\vaultcli.dll
10/7/2020 - 22:47:5.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\vaultcli.dll
10/7/2020 - 22:47:5.918Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:5.918Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:5.934Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\All Users\AppData\Roaming\FlashFXP\3quick.dat
10/7/2020 - 22:47:5.934Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\ProgramData\APPDATA\ROAMING\FLASHFXP\3QUICK.DAT
10/7/2020 - 22:47:5.934Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Flock\Browser\profiles.ini
10/7/2020 - 22:47:5.934Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:5.934Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_32\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a
10/7/2020 - 22:47:5.934Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a
10/7/2020 - 22:47:5.934Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a
10/7/2020 - 22:47:5.934Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
10/7/2020 - 22:47:5.950Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dllMicrosoft.VisualBasic.resources.dll
10/7/2020 - 22:47:5.950Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
10/7/2020 - 22:47:5.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dllMicrosoft.VisualBasic.resources.dll
10/7/2020 - 22:47:5.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dllMicrosoft.VisualBasic.resources.dll
10/7/2020 - 22:47:5.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dllMicrosoft.VisualBasic.resources.dll
10/7/2020 - 22:47:5.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dllMicrosoft.VisualBasic.resources.dll
10/7/2020 - 22:47:5.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dllMicrosoft.VisualBasic.resources.dll
10/7/2020 - 22:47:5.950Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a
10/7/2020 - 22:47:5.950Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a
10/7/2020 - 22:47:5.950Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
10/7/2020 - 22:47:5.950Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
10/7/2020 - 22:47:5.950Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dllMicrosoft.VisualBasic.resources.dll
10/7/2020 - 22:47:5.950Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
10/7/2020 - 22:47:5.950Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dllMicrosoft.VisualBasic.resources.dll
10/7/2020 - 22:47:5.950Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dllMicrosoft.VisualBasic.resources.dll
10/7/2020 - 22:47:5.950Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Mozilla\icecat\profiles.ini
10/7/2020 - 22:47:5.950Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Mozilla\icecat\profiles.ini
10/7/2020 - 22:47:5.950Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Moonchild Productions\Pale Moon\profiles.ini
10/7/2020 - 22:47:5.950Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Moonchild Productions\Pale Moon\profiles.ini
10/7/2020 - 22:47:5.950Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Claws-mail
10/7/2020 - 22:47:5.950Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Claws-mail\clawsrc
10/7/2020 - 22:47:6.12Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Monitor\Folder.lst
10/7/2020 - 22:47:6.12Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\8pecxstudios\Cyberfox\profiles.ini
10/7/2020 - 22:47:6.12Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\8pecxstudios\Cyberfox\profiles.ini
10/7/2020 - 22:47:6.12Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Opera Mail\Opera Mail\wand.dat
10/7/2020 - 22:47:6.12Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Postbox\profiles.ini
10/7/2020 - 22:47:6.12Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Postbox\profiles.ini
10/7/2020 - 22:47:6.12Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\UCBrowser
10/7/2020 - 22:47:6.12Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:6.59Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:6.106Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:6.153Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\SmartFTP\Client 2.0\Favorites\Quick Connect\
10/7/2020 - 22:47:6.153Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:6.200Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\SmartFTP\Client 2.0\Favorites\Quick Connect\
10/7/2020 - 22:47:6.200Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:6.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:6.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/7/2020 - 22:47:6.340Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\CoreFTP\sites.idx
10/7/2020 - 22:47:6.340Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:6.387Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:6.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\mpr.dll
10/7/2020 - 22:47:6.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\mpr.dll
10/7/2020 - 22:47:6.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\scrrun.dll
10/7/2020 - 22:47:6.668Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\scrrun.dll
10/7/2020 - 22:47:7.43Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\SysWOW64\wshom.ocx
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:7.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/7/2020 - 22:47:7.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Trillian\users\global\accounts.dat
10/7/2020 - 22:47:7.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Google\Chrome\User Data\
10/7/2020 - 22:47:7.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Comodo\IceDragon\profiles.ini
10/7/2020 - 22:47:7.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Comodo\IceDragon\profiles.ini
10/7/2020 - 22:47:7.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Program Files (x86)\jDownloader\config\database.script
10/7/2020 - 22:47:7.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Tencent\QQBrowser\User Data
10/7/2020 - 22:47:7.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Local\Tencent\QQBrowser\User Data\Default\EncryptedStorage
10/7/2020 - 22:47:7.137Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\NETGATE Technologies\BlackHawk\profiles.ini
10/7/2020 - 22:47:7.153Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\NETGATE Technologies\BlackHawk\profiles.ini
10/7/2020 - 22:47:7.153Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\FileZilla\recentservers.xml
10/7/2020 - 22:47:7.153Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Mozilla\Firefox\profiles.ini
10/7/2020 - 22:47:7.153Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Mozilla\Firefox\profiles.ini
10/7/2020 - 22:47:7.153Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dll
10/7/2020 - 22:47:7.247Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:7.247Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dll
10/7/2020 - 22:47:7.247Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:7.293Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:7.340Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:7.387Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:7.434Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:7.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:7.528Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:7.575Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:7.622Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:7.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:7.715Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:7.762Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:7.809Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:7.856Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:7.903Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:7.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:7.997Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.43Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089
10/7/2020 - 22:47:8.90Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089
10/7/2020 - 22:47:8.90Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.325Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.372Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.418Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.512Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.559Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.606Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.653Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.747Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.793Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.840Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.887Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.934Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/7/2020 - 22:47:8.981Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Psi\profiles
10/7/2020 - 22:47:8.981Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Users\Behemot\AppData\Roaming\Psi+\profiles
10/7/2020 - 22:47:9.75Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:9.122Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
10/7/2020 - 22:47:9.122Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
10/7/2020 - 22:47:9.309Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
10/7/2020 - 22:47:9.309Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe.Local
10/7/2020 - 22:47:9.309Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/7/2020 - 22:47:9.309Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/7/2020 - 22:47:9.309Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/7/2020 - 22:47:9.309Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/7/2020 - 22:47:9.309Unknown2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\pt-BR
10/7/2020 - 22:47:9.309Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\pt-BR\mscorrc.dll
10/7/2020 - 22:47:9.309Open2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\pt-BR\mscorrc.dll
10/7/2020 - 22:47:15.481Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:47:15.528Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:47:15.575Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:47:15.622Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:47:15.668Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:47:15.715Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:47:15.762Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:47:15.809Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:47:15.856Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:47:15.903Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:47:15.950Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:47:16.43Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:47:16.90Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:47:16.137Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:47:16.184Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:47:16.231Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:47:16.278Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:16.325Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:16.372Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:16.418Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:16.465Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:16.512Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/7/2020 - 22:47:16.559Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/7/2020 - 22:47:23.653Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/7/2020 - 22:47:23.700Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/7/2020 - 22:47:23.747Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/7/2020 - 22:47:23.793Read2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll

Process
Trace
10/7/2020 - 22:45:56.731Create1480C:\malware.exe2136C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
10/7/2020 - 22:45:57.747Create1480C:\malware.exe2692C:\Windows\SysWOW64\cmd.exe
10/7/2020 - 22:45:58.28Create2692C:\Windows\SysWOW64\cmd.exe1928C:\Windows\SysWOW64\timeout.exe
10/7/2020 - 22:45:59.153Terminate2692C:\Windows\SysWOW64\cmd.exe1928C:\Windows\SysWOW64\timeout.exe
10/7/2020 - 22:46:10.387Terminate1480C:\malware.exe2692C:\Windows\SysWOW64\cmd.exe

Analysis
Reason
Timeout

Status
Sucessfully Executed

Results
1

Registry
Trace
10/7/2020 - 22:45:57.543Write1480C:\malware.exeHKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapProxyBypass
10/7/2020 - 22:45:57.543Write1480C:\malware.exeHKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapIntranetName
10/7/2020 - 22:45:57.543Write1480C:\malware.exeHKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapUNCAsIntranet
10/7/2020 - 22:45:57.543Write1480C:\malware.exeHKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapAutoDetect
10/7/2020 - 22:45:57.543Write1480C:\malware.exeHKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapProxyBypass
10/7/2020 - 22:45:57.543Write1480C:\malware.exeHKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapIntranetName
10/7/2020 - 22:45:57.543Write1480C:\malware.exeHKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapUNCAsIntranet
10/7/2020 - 22:45:57.543Write1480C:\malware.exeHKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapAutoDetect

File Summary
Created
Identified: False cancel

Deleted
Identified: True check_circle

Process Summary
Created
Identified: True check_circle

Deleted
Identified: True check_circle

Registry Summary
Proxy
Identified: False cancel

AutoRun
Identified: False cancel

Created
Identified: True check_circle

Deleted
Identified: False cancel

Browsers
Identified: False cancel

Internet
Identified: True check_circle

Loading...

DNS
Query

Response

TCP
Info

UDP
Info

HTTP
Info

Summary
DNS
False cancel

TCP
False cancel

UDP
False cancel

HTTP
False cancel

Results
BINARY
KNN (K=3, NFS-BRMalware)
confidence: 66.67%
suspicious: False cancel

Decision Tree (NFS-BRMalware)
confidence: 100.00%
suspicious: True check_circle

SVC (Kernel=Linear, NFS-BRMalware)
confidence: 97.03%
suspicious: False cancel

MalConv (Ember: Raw Bytes, Threshold=0.5)
confidence: 61.30%
suspicious: True check_circle

Random Forest (100 estimators, NFS-BRMalware)
confidence: 70.00%
suspicious: False cancel

Non-Negative MalConv (Ember: Raw Bytes, Threshold=0.35)
confidence: 74.52%
suspicious: False cancel

LightGDM (Ember: File Characteristics, Threshold=0.8336)
confidence: 100.00%
suspicious: True check_circle

Add to Collection
Download