Report #11241 check_circle

  • Creation Date: Sept. 10, 2020, 1:38 p.m.
  • Last Update: Sept. 10, 2020, 4:57 p.m.
  • File: Dropper_011.exe
  • Results:
Binary
DLL
False cancel
Size
216.50KB
trid
61.7% Win64 Executable
14.7% Win32 Dynamic Link Library
10.0% Win32 Executable
4.5% OS/2 Executable
4.4% Generic Win/DOS Executable
type
PE
wordsize
64
Subsystem
Windows CLI
Hashes
md5
83bd5e39f3aca062afd1ca7f93faa59a
sha1
531ed55ac5223d9b1e9ad55b7bb2680531eb4f1f
crc32
0x8520814c
sha224
af9e842c8a194e2f43184b95ea1e7a084380e5aeded1235dd6732a2e
sha256
1ba2a367016edf1b2840997bf0f478db07291c8a06ad556255ad1e4c665feac5
sha384
a52f6b1fd1fedf5ffdb6ff17dba253337bb2de7152aedd0916b33fdc20864fc5308ad3920892c42dd2642904f3e1b6c9
sha512
5165e61ce0bdf887edf1e11ccfc24862c6f4142fe0d9729345721cdabd8eb3ee0c54ae47ada64f025310034a612b58f402442cd732a4696ae8a7896cebd6a4d5
ssdeep
6144:0PP8LV6Bta6dtJmakIM5O1S2znBGlNbbzFYnQEnAz:q8LV6Btpmkx1S4YBYnP
Community
Google
False cancel
HashLib
False cancel
YARA
Matches
network_dns, domain, anti_dbg, HasDebugData, Nanocore_RAT_Gen_2, contentis_base64, NETexecutableMicrosoft, win_registry, IsPE64, IsConsole, IP, IsPacked, Microsoft_Visual_Cpp_80_DLL, NanoCore, HasRichSignature, disable_dep

Suspicious
True check_circle

Strings
List
C:\Users\Win\Documents\Visual Studio 2012\Projects\Dropper\x64\Release\Dropper.pdb
System.IO
System.Net
NanoCore Client.exe
B.cm
dnsapi.dll
System.Net.Sockets
1.2.2.0
System.Security.Cryptography
System.Security.Principal
System.Security.AccessControl
System.IO.Compression
4System.Web.Services.Protocols.SoapHttpClientProtocol
COMCTL32.dll
MSVCR110.dll
WINMM.dll
UxTheme.dll
ntdll.dll
proc.exe
proc.exe
PipeCreated
PipeClosed
NanoCore.ClientPlugin
NanoCore.ClientPluginHost
8.0.0.0
add_Completed
System.Windows.Forms.Form
ffefeeffefea(
get_Connected
ConnectionStateChanged
Delete
Next
DeleteValue
ReceiveAsync
Delegate
DeleteFile
RegOpenKeyEx
Connected
MulticastDelegate
System.Windows.Forms
s%dEUK
RebuildHostCache
DnsQuery_A
DisableProtection
RestoreProtection
mscoree.dll
NanoCore
get_AddressList
NanoCore Client
set_AutoFlush
set_UseShellExecute
get_SocketError
get_ExecutablePath
get_UserName
get_MachineName
<requestedPrivileges>
get_MetadataToken
__crt_debugger_hook
DnsRecord
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
FileCommand
AddHostEntry
CommandType
PluginCommand
BaseCommand
DebuggerHiddenAttribute
IsProcessorFeaturePresent
ClientPlugin
IClientNetwork
SecurityIdentifier
EnterDebugMode
IPHostEntry
IClientAppHost
IClientDataHost
IClientUIHost
CompressionMode
GetHostEntry
LeaveDebugMode
CreateEventW
DeflateStream
GetInterfaces
ClientUninstalling
SendToServer
RegistryKey
ReadPacket
HostDetails
PipeExists
ClosePipe
SocketException
IsDebuggerPresent
IClientLoggingHost
DebuggerStepThroughAttribute
SocketError
14FAE
SocketType
#=q85afbI_HcqBFOZnC0iAqsNghLb3LsuyjFtpLEYYoPX8=
Registry
OpenProcess
CreateProcessW
GenericSecurityDescriptor

Foremost
Matches
24.exe, 202 KB
Suspicious
True check_circle
Heuristics
IPs
hasIPs: False cancel
Allowed
Suspicious
hasAllowed: False cancel
hasSuspicious: False cancel

URLs
Allowed
hasURLs: False cancel
Suspicious
hasAllowed: False cancel
hasSuspicious: False cancel

Files
Allowed: SHLWAPI.dll, SHELL32.dll, RPCRT4.dll, WINMM.dll, kernel32.dll, OLEAUT32.dll, ntdll.dll, ADVAPI32.dll, psapi.dll, USER32.dll, mscoree.dll, dnsapi.dll, MSVCR110.dll, COMCTL32.dll, ole32.dll, UxTheme.dll, GDI32.dll
hasFiles: True check_circle
Suspicious
hasAllowed: True check_circle
hasSuspicious: False cancel

Binary
Sizes
RVA
RVA: 16
Suspicious: False cancel
Code
Size: 217088
Suspicious: False cancel
Image
Address: 5368709120
Suspicious: False cancel
Stack
Stack: 4096
Suspicious: False cancel
Headers
Headers: 1024
Suspicious: False cancel
Suspicious: False cancel

Symbols
Number
Number: 0
Suspicious: True check_circle
Pointer
Pointer: 0
Suspicious: True check_circle
Directories
Number: 16
Suspicious: False cancel

Checksum
Value: 0
Suspicous: True check_circle

Sections
Allowed: .text, .rdata, .data, .pdata, .rsrc, .reloc
Suspicious
hasAllowed: True check_circle
hasSections: True check_circle
hasSuspicious: False cancel

Versions
OS
Version: 6
Suspicious: False cancel
Image
Version: True check_circle
Suspicious: 6
Linker
Version: 11.0
Suspicious: False cancel
Subsystem
Version: 6.0
Suspicious: False cancel
Suspicious: False cancel

EntryPoint
Address: 6772
Suspicious: False cancel

Anomalies
Anomalies: The header checksum and the calculated checksum do not match.
hasAnomalies: True check_circle

Libraries
Allowed: shlwapi.dll, shell32.dll, rpcrt4.dll, winmm.dll, kernel32.dll, oleaut32.dll, ntdll.dll, advapi32.dll, psapi.dll, user32.dll, mscoree.dll, dnsapi.dll, comctl32.dll, ole32.dll, uxtheme.dll, gdi32.dll
hasLibs: True check_circle
Suspicious: msvcr110.dll
hasAllowed: True check_circle
hasSuspicious: True check_circle

Timestamp
Past: False cancel
Valid: True check_circle
Value: 2020-09-03 18:38:59
Future: False cancel

Compilation
Packed: False cancel
Missing: False cancel
Packers
Compiled: True check_circle
Compilers: Microsoft Visual C++ 8.0 (DLL)

Obfuscation
XOR: False cancel
Fuzzing: False cancel

PEDetector
Matches
12448
Suspicious
True check_circle
Disassembly
hasTricks
False cancel
Tricks
AVclass
nanocore
1
VirusTotal
md5
83bd5e39f3aca062afd1ca7f93faa59a
sha1
531ed55ac5223d9b1e9ad55b7bb2680531eb4f1f
SCANS (DETECTION RATE = 47.06%)
AVG
result: MSIL:NanoCore-B [Trj]
update: 20200903
version: 18.4.3895.0
detected: True check_circle

CMC
update: 20200903
version: 2.7.2019.1
detected: False cancel

MAX
result: malware (ai score=80)
update: 20200903
version: 2019.9.16.1
detected: True check_circle

APEX
update: 20200901
version: 6.66
detected: False cancel

Bkav
update: 20200903
version: 1.3.0.9899
detected: False cancel

K7GW
update: 20200903
version: 11.133.35155
detected: False cancel

ALYac
result: Backdoor.MSIL.Agent.GD
update: 20200903
version: 1.1.1.5
detected: True check_circle

Avast
result: MSIL:NanoCore-B [Trj]
update: 20200903
version: 18.4.3895.0
detected: True check_circle

Avira
result: TR/Dropper.Gen
update: 20200903
version: 8.3.3.8
detected: True check_circle

Baidu
update: 20190318
version: 1.0.0.2
detected: False cancel

Cynet
result: Malicious (score: 85)
update: 20200903
version: 4.0.0.24
detected: True check_circle

Cyren
update: 20200903
version: 6.3.0.2
detected: False cancel

DrWeb
result: Trojan.Nanocore.23
update: 20200903
version: 7.0.48.8080
detected: True check_circle

GData
result: Backdoor.MSIL.Agent.GD
update: 20200903
version: A:25.26875B:27.20044
detected: True check_circle

Panda
update: 20200903
version: 4.6.4.2
detected: False cancel

VBA32
update: 20200903
version: 4.4.1
detected: False cancel

VIPRE
result: Trojan.MSIL.NanoCore.B (fs)
update: 20200903
version: 86422
detected: True check_circle

Zoner
update: 20200903
version: 0.0.0.0
detected: False cancel

ClamAV
result: Win.Trojan.Nanocore-5
update: 20200903
version: 0.102.4.0
detected: True check_circle

Comodo
update: 20200728
version: 32668
detected: False cancel

Ikarus
update: 20200903
version: 0.1.5.2
detected: False cancel

McAfee
result: Artemis!83BD5E39F3AC
update: 20200903
version: 6.0.6.653
detected: True check_circle

Rising
result: Backdoor.NanoCore!1.B6F9 (CLASSIC)
update: 20200903
version: 25.0.0.26
detected: True check_circle

Sophos
update: 20200903
version: 4.98.0
detected: False cancel

Yandex
update: 20200903
version: 5.5.2.24
detected: False cancel

Zillya
update: 20200903
version: 2.0.0.4168
detected: False cancel

Acronis
update: 20200806
version: 1.1.1.77
detected: False cancel

Alibaba
update: 20190527
version: 0.3.0.5
detected: False cancel

Arcabit
result: Backdoor.MSIL.Agent.GD
update: 20200903
version: 1.0.0.881
detected: True check_circle

Cylance
result: Unsafe
update: 20200903
version: 2.3.1.101
detected: True check_circle

Elastic
update: 20200831
version: 4.0.8
detected: False cancel

FireEye
result: Generic.mg.83bd5e39f3aca062
update: 20200903
version: 32.36.1.0
detected: True check_circle

Sangfor
update: 20200814
version: 1.0
detected: False cancel

TACHYON
update: 20200903
version: 2020-09-03.02
detected: False cancel

Tencent
result: Malware.Win32.Gencirc.10cdd3af
update: 20200903
version: 1.0.0.1
detected: True check_circle

ViRobot
update: 20200903
version: 2014.3.20.0
detected: False cancel

Webroot
update: 20200903
version: 1.0.0.403
detected: False cancel

eGambit
result: Trojan.Generic
update: 20200903
detected: True check_circle

Ad-Aware
result: Backdoor.MSIL.Agent.GD
update: 20200903
version: 3.0.16.117
detected: True check_circle

F-Secure
result: Trojan.TR/Dropper.Gen
update: 20200903
version: 12.0.86.52
detected: True check_circle

Fortinet
update: 20200903
version: 6.2.142.0
detected: False cancel

Invincea
update: 20200903
version: 1.0.1.0
detected: False cancel

Jiangmin
update: 20200903
version: 16.0.100
detected: False cancel

Kingsoft
update: 20200903
version: 2013.8.14.323
detected: False cancel

Paloalto
update: 20200903
version: 1.0
detected: False cancel

Symantec
result: Trojan.Nancrat
update: 20200903
version: 1.12.0.0
detected: True check_circle

AhnLab-V3
update: 20200903
version: 3.18.1.10026
detected: False cancel

Antiy-AVL
result: Trojan[Backdoor]/Win32.AGeneric
update: 20200903
version: 3.0.0.1
detected: True check_circle

Kaspersky
result: Trojan.MSIL.Agent.fpar
update: 20200903
version: 15.0.1.13
detected: True check_circle

MaxSecure
result: Trojan.Malware.121218.susgen
update: 20200902
version: 1.0.0.1
detected: True check_circle

Microsoft
result: Trojan:Win32/Ymacco.AA1B
update: 20200903
version: 1.1.17400.5
detected: True check_circle

Qihoo-360
update: 20200903
version: 1.0.0.1120
detected: False cancel

ZoneAlarm
result: Trojan.MSIL.Agent.fpar
update: 20200903
version: 1.0
detected: True check_circle

Cybereason
result: malicious.9f3aca
update: 20190616
version: 1.2.449
detected: True check_circle

ESET-NOD32
result: MSIL/NanoCore.E
update: 20200903
version: 21931
detected: True check_circle

TrendMicro
update: 20200903
version: 11.0.0.1006
detected: False cancel

BitDefender
result: Backdoor.MSIL.Agent.GD
update: 20200903
version: 7.2
detected: True check_circle

CrowdStrike
result: win/malicious_confidence_90% (W)
update: 20190702
version: 1.0
detected: True check_circle

K7AntiVirus
update: 20200903
version: 11.133.35155
detected: False cancel

SentinelOne
update: 20200724
version: 4.4.0.0
detected: False cancel

Malwarebytes
update: 20200903
version: 3.6.4.335
detected: False cancel

TotalDefense
update: 20200903
version: 37.1.62.1
detected: False cancel

CAT-QuickHeal
update: 20200903
version: 14.00
detected: False cancel

NANO-Antivirus
result: Trojan.Win32.NanoBot.hmqoyu
update: 20200903
version: 1.0.134.25140
detected: True check_circle

BitDefenderTheta
result: Gen:NN.ZemsilF.34216.mmX@aOfJCjn
update: 20200902
version: 7.2.37796.0
detected: True check_circle

MicroWorld-eScan
result: Backdoor.MSIL.Agent.GD
update: 20200903
version: 14.0.409.0
detected: True check_circle

SUPERAntiSpyware
update: 20200828
version: 5.6.0.1032
detected: False cancel

TrendMicro-HouseCall
update: 20200903
version: 10.0.0.1040
detected: False cancel

total
68
sha256
1ba2a367016edf1b2840997bf0f478db07291c8a06ad556255ad1e4c665feac5
scan_id
1ba2a367016edf1b2840997bf0f478db07291c8a06ad556255ad1e4c665feac5-1599177147
resource
83bd5e39f3aca062afd1ca7f93faa59a
positives
32
scan_date
2020-09-03 23:52:27
verbose_msg
Scan finished, information embedded
response_code
1
File
Trace
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\Windows\System32\sechost.dll
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\Windows\System32\sechost.dll
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\malware.exe.Local
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6
10/9/2020 - 15:45:43.559Unknown1480C:\malware.exeC:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll
10/9/2020 - 15:45:43.559Unknown1480C:\malware.exeC:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll
10/9/2020 - 15:45:43.559Unknown1480C:\malware.exeC:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\WINMM.dll
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\Windows\System32\winmm.dll
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\Windows\System32\winmm.dll
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\UxTheme.dll
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\Windows\System32\uxtheme.dll
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\Windows\System32\uxtheme.dll
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\MSVCR110.dll
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\Windows\System32\msvcr110.dll
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\Windows\System32\msvcr110.dll
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\Windows\System32\imm32.dll
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\Windows\System32\imm32.dll
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\Windows\System32\imm32.dll
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\Windows\System32\imm32.dll
10/9/2020 - 15:45:43.559Open1480C:\malware.exeC:\Windows\System32\imm32.dll
10/9/2020 - 15:45:43.575Open1480C:\malware.exeC:\Windows\System32\imm32.dll
10/9/2020 - 15:45:43.575Open1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.575Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.575Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.575Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.575Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.575Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.575Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.575Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.575Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.575Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.575Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.575Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.575Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.575Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.575Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.575Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.575Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.575Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.575Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.590Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Unknown1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Open1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.606Write1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.762Unknown1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.762Open1480C:\malware.exeC:\Windows\System32\apphelp.dll
10/9/2020 - 15:45:43.762Open1480C:\malware.exeC:\Windows\System32\apphelp.dll
10/9/2020 - 15:45:43.762Open1480C:\malware.exeC:\Windows\AppPatch\sysmain.sdb
10/9/2020 - 15:45:43.762Open1480C:\malware.exeC:\Monitor
10/9/2020 - 15:45:43.762Unknown1480C:\malware.exeC:\Monitor
10/9/2020 - 15:45:43.762Open1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.762Unknown1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.762Open1480C:\malware.exeC:\
10/9/2020 - 15:45:43.762Unknown1480C:\malware.exeC:\
10/9/2020 - 15:45:43.762Open1480C:\malware.exeC:\Monitor
10/9/2020 - 15:45:43.762Unknown1480C:\malware.exeC:\Monitor
10/9/2020 - 15:45:43.762Open1480C:\malware.exeC:\Monitor
10/9/2020 - 15:45:43.762Unknown1480C:\malware.exeC:\Monitor
10/9/2020 - 15:45:43.762Open1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.762Read1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.762Open1480C:\malware.exeC:\Monitor\ui\SwDRM.dll
10/9/2020 - 15:45:43.762Open1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.762Open1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.762Unknown1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.762Open1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.762Unknown1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.762Unknown1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.762Read1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.762Read1480C:\malware.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.762Unknown1480C:\malware.exeC:\Monitor
10/9/2020 - 15:45:43.762Unknown1480C:\malware.exeC:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6
10/9/2020 - 15:45:43.762Open2088C:\Monitor\proc.exeC:\Windows\Prefetch\PROC.EXE-5509F567.pf
10/9/2020 - 15:45:43.762Open2088C:\Monitor\proc.exeC:\Windows
10/9/2020 - 15:45:43.762Open2088C:\Monitor\proc.exeC:\Windows\System32\wow64.dll
10/9/2020 - 15:45:43.762Open2088C:\Monitor\proc.exeC:\Windows\System32\wow64.dll
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\System32\wow64win.dll
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\System32\wow64win.dll
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\System32\wow64cpu.dll
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\System32\wow64cpu.dll
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\System32\wow64log.dll
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows
10/9/2020 - 15:45:43.778Unknown2088C:\Monitor\proc.exeC:\Windows
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Monitor
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\mscoree.dll
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\mscoree.dll
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\sechost.dll
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\sechost.dll
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\MSCOREE.DLL.local
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/9/2020 - 15:45:43.778Unknown2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\Upgrades.2.0.50727
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\Upgrades.2.0.50727
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\imm32.dll
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\imm32.dll
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\imm32.dll
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\imm32.dll
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\imm32.dll
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\imm32.dll
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Monitor\proc.exe.config
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.778Unknown2088C:\Monitor\proc.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.778Unknown2088C:\Monitor\proc.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/9/2020 - 15:45:43.778Unknown2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/9/2020 - 15:45:43.778Unknown2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
10/9/2020 - 15:45:43.778Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
10/9/2020 - 15:45:43.793Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
10/9/2020 - 15:45:43.809Open2088C:\Monitor\proc.exeC:\Monitor\proc.exe.Local
10/9/2020 - 15:45:43.809Open2088C:\Monitor\proc.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/9/2020 - 15:45:43.809Unknown2088C:\Monitor\proc.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/9/2020 - 15:45:43.809Open2088C:\Monitor\proc.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/9/2020 - 15:45:43.809Open2088C:\Monitor\proc.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\msvcr80.dll
10/9/2020 - 15:45:43.809Open2088C:\Monitor\proc.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\msvcr80.dll
10/9/2020 - 15:45:43.809Open2088C:\Monitor\proc.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\msvcr80.dll
10/9/2020 - 15:45:43.809Open2088C:\Monitor\proc.exeC:\
10/9/2020 - 15:45:43.809Unknown2088C:\Monitor\proc.exeC:\
10/9/2020 - 15:45:43.809Open2088C:\Monitor\proc.exeC:\Windows
10/9/2020 - 15:45:43.809Unknown2088C:\Monitor\proc.exeC:\Windows
10/9/2020 - 15:45:43.809Open2088C:\Monitor\proc.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/9/2020 - 15:45:43.809Unknown2088C:\Monitor\proc.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/9/2020 - 15:45:44.168Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
10/9/2020 - 15:45:44.215Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:45:44.215Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:45:44.215Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:45:44.215Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:45:44.215Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:45:44.215Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:45:44.215Open2088C:\Monitor\proc.exeC:\Monitor\proc.exe.config
10/9/2020 - 15:45:44.215Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
10/9/2020 - 15:45:44.215Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
10/9/2020 - 15:45:44.215Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
10/9/2020 - 15:45:44.215Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
10/9/2020 - 15:45:44.215Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
10/9/2020 - 15:45:44.215Open2088C:\Monitor\proc.exeC:\Windows\Globalization\Sorting\SortDefault.nls
10/9/2020 - 15:45:44.215Unknown2088C:\Monitor\proc.exeC:\Windows\Globalization\Sorting\SortDefault.nlsSortDefault.nls
10/9/2020 - 15:45:44.215Open2088C:\Monitor\proc.exeC:\Users\Behemot
10/9/2020 - 15:45:44.215Open2088C:\Monitor\proc.exeC:\Users\Behemot
10/9/2020 - 15:45:44.215Unknown2088C:\Monitor\proc.exeC:\Users\Behemot
10/9/2020 - 15:45:44.215Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming
10/9/2020 - 15:45:44.215Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming
10/9/2020 - 15:45:44.215Unknown2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming
10/9/2020 - 15:45:44.215Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
10/9/2020 - 15:45:44.215Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
10/9/2020 - 15:45:44.231Open2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\index164.dat
10/9/2020 - 15:45:44.231Open2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
10/9/2020 - 15:45:44.231Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Open2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089
10/9/2020 - 15:45:44.247Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.247Open2088C:\Monitor\proc.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:44.247Unknown2088C:\Monitor\proc.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:44.247Open2088C:\Monitor\proc.exeC:\
10/9/2020 - 15:45:44.247Unknown2088C:\Monitor\proc.exeC:\
10/9/2020 - 15:45:44.247Open2088C:\Monitor\proc.exeC:\Monitor
10/9/2020 - 15:45:44.247Unknown2088C:\Monitor\proc.exeC:\Monitor
10/9/2020 - 15:45:44.247Open2088C:\Monitor\proc.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:44.247Unknown2088C:\Monitor\proc.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:44.247Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
10/9/2020 - 15:45:44.247Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\rpcss.dll
10/9/2020 - 15:45:44.247Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\rpcss.dll
10/9/2020 - 15:45:44.247Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\uxtheme.dll
10/9/2020 - 15:45:44.247Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\uxtheme.dll
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.309Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\l_intl.nls
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.309Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Temporary Internet Files
10/9/2020 - 15:45:44.309Unknown2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Local\Microsoft\Windows\Temporary Internet Files
10/9/2020 - 15:45:44.309Open2088C:\Monitor\proc.exeC:\Monitor\proc.exe.config
10/9/2020 - 15:45:44.309Open2088C:\Monitor\proc.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:44.309Unknown2088C:\Monitor\proc.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:44.309Open2088C:\Monitor\proc.exeC:\Monitor
10/9/2020 - 15:45:44.309Unknown2088C:\Monitor\proc.exeC:\Monitor
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:44.309Open2088C:\Monitor\proc.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:44.309Unknown2088C:\Monitor\proc.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:44.309Open2088C:\Monitor\proc.exeC:\Windows\assembly\pubpol4.dat
10/9/2020 - 15:45:44.309Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC\PublisherPolicy.tme
10/9/2020 - 15:45:44.309Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
10/9/2020 - 15:45:44.309Unknown2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:45:44.309Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:45:44.309Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:45:44.309Unknown2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:45:44.325Open2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dll
10/9/2020 - 15:45:44.325Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Open2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:44.325Open2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dll
10/9/2020 - 15:45:44.325Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:44.325Open2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:44.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:44.340Open2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Open2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.403Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.450Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.497Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.543Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:44.684Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089
10/9/2020 - 15:45:44.918Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089
10/9/2020 - 15:45:44.918Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:45.481Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:45.528Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:45.575Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089
10/9/2020 - 15:45:45.668Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089
10/9/2020 - 15:45:45.668Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:45.715Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:45.762Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:45.809Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:45.856Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:45.903Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:45.950Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a
10/9/2020 - 15:45:46.43Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a
10/9/2020 - 15:45:46.43Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:46.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:46.137Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:46.184Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:46.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:46.278Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:46.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:46.372Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:46.418Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:46.465Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:46.512Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:46.559Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:46.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:46.653Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:46.700Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:46.747Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:46.887Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:46.934Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:47.28Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:47.75Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:47.122Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:47.168Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:47.215Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:47.262Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:47.497Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
10/9/2020 - 15:45:47.543Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
10/9/2020 - 15:45:47.731Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
10/9/2020 - 15:45:47.731Open2088C:\Monitor\proc.exeC:\Monitor\proc.exe.Local
10/9/2020 - 15:45:47.731Open2088C:\Monitor\proc.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/9/2020 - 15:45:47.731Unknown2088C:\Monitor\proc.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/9/2020 - 15:45:47.731Open2088C:\Monitor\proc.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/9/2020 - 15:45:47.731Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:47.731Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:47.731Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:47.731Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:47.747Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_32\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a
10/9/2020 - 15:45:47.747Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a
10/9/2020 - 15:45:47.747Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a
10/9/2020 - 15:45:47.747Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a
10/9/2020 - 15:45:47.747Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a
10/9/2020 - 15:45:47.747Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:47.747Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:47.747Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:47.793Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:47.840Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:47.887Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:47.934Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:47.981Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:48.28Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:48.75Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:48.168Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:48.215Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:48.262Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:48.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:48.356Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:48.450Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:48.497Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:48.543Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:48.590Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\VERSION.dll
10/9/2020 - 15:45:48.590Open2088C:\Monitor\proc.exeC:\Monitor\VERSION.dll
10/9/2020 - 15:45:48.590Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\version.dll
10/9/2020 - 15:45:48.590Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\version.dll
10/9/2020 - 15:45:48.590Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
10/9/2020 - 15:45:48.590Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:48.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:48.637Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
10/9/2020 - 15:45:48.637Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:48.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:48.684Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:48.731Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:48.872Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:48.918Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:48.965Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:49.12Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:49.59Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:49.106Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:49.153Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:49.200Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:49.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:49.293Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:49.387Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:49.434Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:49.481Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:49.622Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:49.668Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:49.715Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:49.809Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:49.856Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:49.903Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:49.950Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:49.997Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:50.43Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:50.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:50.137Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:50.184Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:50.231Open2088C:\Monitor\proc.exeC:\Windows\Globalization\pt-br.nlp
10/9/2020 - 15:45:50.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:50.278Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:50.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:50.372Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:50.418Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:50.465Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:50.465Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:50.512Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:50.559Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:50.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:50.653Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:50.700Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:50.747Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:50.793Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:50.840Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:50.887Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:50.934Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:50.981Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:51.28Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:51.75Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:51.122Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:51.168Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:51.215Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:51.262Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:51.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:51.356Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:51.403Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:51.450Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:51.497Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:51.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:51.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:51.684Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:51.731Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:51.778Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:51.825Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:51.872Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:51.918Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:51.965Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.12Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.59Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.106Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.153Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.200Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.293Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\uxtheme.dll
10/9/2020 - 15:45:52.293Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
10/9/2020 - 15:45:52.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dllSystem.Windows.Forms.dll
10/9/2020 - 15:45:52.387Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dllSystem.Windows.Forms.dll
10/9/2020 - 15:45:52.434Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dllSystem.Windows.Forms.dll
10/9/2020 - 15:45:52.481Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dllSystem.Windows.Forms.dll
10/9/2020 - 15:45:52.528Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.528Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.528Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.528Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.528Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.528Open2088C:\Monitor\proc.exeC:\Monitor\dwmapi.dll
10/9/2020 - 15:45:52.528Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\dwmapi.dll
10/9/2020 - 15:45:52.528Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\dwmapi.dll
10/9/2020 - 15:45:52.528Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.528Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.528Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.528Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.543Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.543Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.543Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.543Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.543Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.543Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.622Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.622Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.622Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.622Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.622Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.622Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.622Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.622Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.622Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.622Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.622Open2088C:\Monitor\proc.exeC:\Monitor\CRYPTSP.dll
10/9/2020 - 15:45:52.622Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\cryptsp.dll
10/9/2020 - 15:45:52.622Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\cryptsp.dll
10/9/2020 - 15:45:52.622Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\rsaenh.dll
10/9/2020 - 15:45:52.622Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\rsaenh.dll
10/9/2020 - 15:45:52.622Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\rsaenh.dll
10/9/2020 - 15:45:52.622Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\rsaenh.dll
10/9/2020 - 15:45:52.622Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\rsaenh.dll
10/9/2020 - 15:45:52.622Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\rsaenh.dll
10/9/2020 - 15:45:52.622Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\rsaenh.dll
10/9/2020 - 15:45:52.622Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\rsaenh.dll
10/9/2020 - 15:45:52.622Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\rsaenh.dll
10/9/2020 - 15:45:52.622Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\rsaenh.dll
10/9/2020 - 15:45:52.622Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\rsaenh.dll
10/9/2020 - 15:45:52.622Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\rsaenh.dll
10/9/2020 - 15:45:52.622Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089
10/9/2020 - 15:45:52.622Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll
10/9/2020 - 15:45:52.622Open2088C:\Monitor\proc.exeC:\Monitor\bcrypt.dll
10/9/2020 - 15:45:52.622Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\bcrypt.dll
10/9/2020 - 15:45:52.622Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\bcrypt.dll
10/9/2020 - 15:45:52.622Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.622Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.653Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:52.653Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.653Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.653Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.653Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:52.653Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.653Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.668Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.668Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.668Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.668Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.668Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.668Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:52.715Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.762Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.809Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.856Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.950Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:52.997Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:53.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:53.137Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:53.184Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:53.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:53.278Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:53.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:53.418Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:53.465Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:53.512Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:53.559Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:53.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:53.653Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:53.700Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:53.747Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:53.809Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:53.856Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:53.903Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:53.950Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:53.997Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:54.43Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:54.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:54.137Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:54.184Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:54.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:54.278Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:54.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:54.372Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:54.418Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:54.512Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:54.575Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:54.622Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:54.715Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:54.762Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:54.809Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:54.856Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:54.903Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:54.950Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:54.997Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:55.43Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:55.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:55.137Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:55.184Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:55.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:55.278Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:55.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:55.372Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:55.418Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:55.465Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:55.512Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:55.559Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:55.606Open2088C:\Monitor\proc.exeC:\Monitor\shfolder.dll
10/9/2020 - 15:45:55.606Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\shfolder.dll
10/9/2020 - 15:45:55.606Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\shfolder.dll
10/9/2020 - 15:45:55.840Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\FA25E266-6D0F-4DE2-813A-BF4374E0628C
10/9/2020 - 15:45:55.840Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming
10/9/2020 - 15:45:55.840Unknown2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming
10/9/2020 - 15:45:55.840Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData
10/9/2020 - 15:45:55.840Unknown2088C:\Monitor\proc.exeC:\Users\Behemot\AppData
10/9/2020 - 15:45:55.840Open2088C:\Monitor\proc.exeC:\Users\Behemot
10/9/2020 - 15:45:55.840Unknown2088C:\Monitor\proc.exeC:\Users\Behemot
10/9/2020 - 15:45:55.840Open2088C:\Monitor\proc.exeC:\Users
10/9/2020 - 15:45:55.840Unknown2088C:\Monitor\proc.exeC:\Users
10/9/2020 - 15:45:55.840Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\FA25E266-6D0F-4DE2-813A-BF4374E0628C
10/9/2020 - 15:45:55.840Unknown2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\FA25E266-6D0F-4DE2-813A-BF4374E0628C
10/9/2020 - 15:45:55.840Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\FA25E266-6D0F-4DE2-813A-BF4374E0628C\run.dat
10/9/2020 - 15:45:55.840Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:55.887Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\FA25E266-6D0F-4DE2-813A-BF4374E0628C\run.dat
10/9/2020 - 15:45:55.887Write2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\FA25E266-6D0F-4DE2-813A-BF4374E0628C\run.dat
10/9/2020 - 15:45:55.887Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:55.981Open2088C:\Monitor\proc.exeC:\Program Files (x86)
10/9/2020 - 15:45:55.981Unknown2088C:\Monitor\proc.exeC:\Program Files (x86)
10/9/2020 - 15:45:55.981Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:56.28Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:56.75Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:56.122Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:56.168Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\FA25E266-6D0F-4DE2-813A-BF4374E0628C\Exceptions\1.2.2.0
10/9/2020 - 15:45:56.168Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:56.215Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:56.262Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:56.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:56.356Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:56.403Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:56.450Open2088C:\Monitor\proc.exeC:\Monitor\proc.exe:Zone.Identifier
10/9/2020 - 15:45:56.450Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:56.497Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:56.543Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:56.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:56.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:56.684Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:56.731Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:56.778Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:56.825Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:56.872Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:56.918Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:56.918Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:56.918Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:56.918Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:56.918Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:56.918Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:56.918Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\FA25E266-6D0F-4DE2-813A-BF4374E0628C\catalog.dat
10/9/2020 - 15:45:56.918Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:56.918Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\FA25E266-6D0F-4DE2-813A-BF4374E0628C\storage.dat
10/9/2020 - 15:45:56.918Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:56.918Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:56.918Open2088C:\Monitor\proc.exeC:\Monitor\ClientPlugin.dll
10/9/2020 - 15:45:56.918Open2088C:\Monitor\proc.exeC:\Monitor\ClientPlugin\ClientPlugin.dll
10/9/2020 - 15:45:56.918Open2088C:\Monitor\proc.exeC:\Monitor\ClientPlugin.exe
10/9/2020 - 15:45:56.918Open2088C:\Monitor\proc.exeC:\Monitor\ClientPlugin\ClientPlugin.exe
10/9/2020 - 15:45:56.918Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
10/9/2020 - 15:45:56.934Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
10/9/2020 - 15:45:56.934Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
10/9/2020 - 15:45:56.950Open2088C:\Monitor\proc.exeC:\Monitor\proc.exe.Local
10/9/2020 - 15:45:56.950Open2088C:\Monitor\proc.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/9/2020 - 15:45:56.950Unknown2088C:\Monitor\proc.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/9/2020 - 15:45:56.950Open2088C:\Monitor\proc.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/9/2020 - 15:45:56.950Unknown2088C:\Monitor\proc.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/9/2020 - 15:45:56.950Unknown2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\pt-BR
10/9/2020 - 15:45:56.950Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\pt-BR\mscorrc.dll
10/9/2020 - 15:45:56.950Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\pt-BR\mscorrc.dll
10/9/2020 - 15:45:56.950Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089
10/9/2020 - 15:45:56.950Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
10/9/2020 - 15:45:56.950Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:56.950Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
10/9/2020 - 15:45:56.950Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:56.950Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:56.965Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:56.965Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:56.965Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6f4f738362752c5d3a2c9234d604784d\System.Drawing.ni.dllSystem.Drawing.ni.dll
10/9/2020 - 15:45:56.981Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\FA25E266-6D0F-4DE2-813A-BF4374E0628C\settings.bin
10/9/2020 - 15:45:56.981Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:56.981Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:56.981Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:56.981Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
10/9/2020 - 15:45:56.981Unknown2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:45:56.981Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
10/9/2020 - 15:45:56.981Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:45:56.981Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:45:56.981Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:45:56.997Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:45:56.997Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:45:56.997Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
10/9/2020 - 15:45:57.12Unknown2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:45:57.12Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:45:57.12Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:45:57.12Open2088C:\Monitor\proc.exeC:\Monitor\proc.exe.Local
10/9/2020 - 15:45:57.12Open2088C:\Monitor\proc.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/9/2020 - 15:45:57.12Unknown2088C:\Monitor\proc.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/9/2020 - 15:45:57.12Open2088C:\Monitor\proc.exeC:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
10/9/2020 - 15:45:57.12Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:45:57.12Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:45:57.12Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:45:57.12Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:45:57.12Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:45:57.12Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:45:57.12Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:45:57.12Open2088C:\Monitor\proc.exeC:\Monitor\proc.PDB
10/9/2020 - 15:45:57.12Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:45:57.12Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:45:57.12Open2088C:\Monitor\proc.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:57.12Read2088C:\Monitor\proc.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:57.12Read2088C:\Monitor\proc.exeC:\Monitor\proc.exe
10/9/2020 - 15:45:57.12Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:57.28Open2088C:\Monitor\proc.exeC:\Windows\Globalization\en-us.nlp
10/9/2020 - 15:45:57.28Open2088C:\Monitor\proc.exeC:\Monitor\proc.exe.config
10/9/2020 - 15:45:57.28Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089
10/9/2020 - 15:45:57.28Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089
10/9/2020 - 15:45:57.28Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089
10/9/2020 - 15:45:57.28Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dll
10/9/2020 - 15:45:57.28Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/9/2020 - 15:45:57.28Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dll
10/9/2020 - 15:45:57.28Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/9/2020 - 15:45:57.28Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/9/2020 - 15:45:57.28Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/9/2020 - 15:45:57.28Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/9/2020 - 15:45:57.28Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/9/2020 - 15:45:57.28Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089
10/9/2020 - 15:45:57.28Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089
10/9/2020 - 15:45:57.28Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dll
10/9/2020 - 15:45:57.28Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dll
10/9/2020 - 15:45:57.28Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/9/2020 - 15:45:57.28Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dll
10/9/2020 - 15:45:57.28Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/9/2020 - 15:45:57.28Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/9/2020 - 15:45:57.28Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dllmscorlib.resources.dll
10/9/2020 - 15:45:57.28Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dllMicrosoft.VisualBasic.dll
10/9/2020 - 15:45:57.43Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:57.43Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\FA25E266-6D0F-4DE2-813A-BF4374E0628C\settings.bak
10/9/2020 - 15:45:57.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:57.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:57.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:57.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:57.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:57.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:57.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:57.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:57.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:57.106Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:57.106Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:57.153Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:57.153Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:57.200Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:57.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\FA25E266-6D0F-4DE2-813A-BF4374E0628C\Logs\Behemot
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\FA25E266-6D0F-4DE2-813A-BF4374E0628C\Logs
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\FA25E266-6D0F-4DE2-813A-BF4374E0628C
10/9/2020 - 15:45:57.262Unknown2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\FA25E266-6D0F-4DE2-813A-BF4374E0628C
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming
10/9/2020 - 15:45:57.262Unknown2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData
10/9/2020 - 15:45:57.262Unknown2088C:\Monitor\proc.exeC:\Users\Behemot\AppData
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Users\Behemot
10/9/2020 - 15:45:57.262Unknown2088C:\Monitor\proc.exeC:\Users\Behemot
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Users
10/9/2020 - 15:45:57.262Unknown2088C:\Monitor\proc.exeC:\Users
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\FA25E266-6D0F-4DE2-813A-BF4374E0628C\Logs
10/9/2020 - 15:45:57.262Unknown2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\FA25E266-6D0F-4DE2-813A-BF4374E0628C\Logs
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\FA25E266-6D0F-4DE2-813A-BF4374E0628C\Logs\Behemot
10/9/2020 - 15:45:57.262Unknown2088C:\Monitor\proc.exeC:\Users\Behemot\AppData\Roaming\FA25E266-6D0F-4DE2-813A-BF4374E0628C\Logs\Behemot
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Monitor\Lzma#.dll
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Monitor\Lzma#\Lzma#.dll
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Monitor\Lzma#.exe
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Monitor\Lzma#\Lzma#.exe
10/9/2020 - 15:45:57.262Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Monitor\pt-BR\SurveillanceExClientPlugin.resources.dll
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Monitor\pt-BR\SurveillanceExClientPlugin.resources\SurveillanceExClientPlugin.resources.dll
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Monitor\pt-BR\SurveillanceExClientPlugin.resources.exe
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Monitor\pt-BR\SurveillanceExClientPlugin.resources\SurveillanceExClientPlugin.resources.exe
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Windows\Globalization\pt.nlp
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Monitor\pt\SurveillanceExClientPlugin.resources.dll
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Monitor\pt\SurveillanceExClientPlugin.resources\SurveillanceExClientPlugin.resources.dll
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Monitor\pt\SurveillanceExClientPlugin.resources.exe
10/9/2020 - 15:45:57.262Open2088C:\Monitor\proc.exeC:\Monitor\pt\SurveillanceExClientPlugin.resources\SurveillanceExClientPlugin.resources.exe
10/9/2020 - 15:45:57.278Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:45:57.278Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:57.325Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\tzres.dll
10/9/2020 - 15:45:57.325Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\tzres.dll
10/9/2020 - 15:45:57.325Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\tzres.dll
10/9/2020 - 15:45:57.325Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\tzres.dll
10/9/2020 - 15:45:57.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:57.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:57.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:57.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:57.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:57.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:57.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:57.372Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:57.372Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:57.372Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\c0f9cb97c68eb938bd0b36f7ee90e60f\System.Windows.Forms.ni.dllSystem.Windows.Forms.ni.dll
10/9/2020 - 15:45:57.372Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:57.372Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:57.372Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:57.418Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:57.465Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:57.512Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:57.559Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:57.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:57.653Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:57.700Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:57.747Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:57.793Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:57.840Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ws2_32.dll
10/9/2020 - 15:45:57.840Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:57.887Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:57.934Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:57.981Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:58.28Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:58.75Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:58.122Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\mswsock.dll
10/9/2020 - 15:45:58.122Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\mswsock.dll
10/9/2020 - 15:45:58.122Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\WSHTCPIP.DLL
10/9/2020 - 15:45:58.122Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\WSHTCPIP.DLL
10/9/2020 - 15:45:58.122Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\wship6.dll
10/9/2020 - 15:45:58.122Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\wship6.dll
10/9/2020 - 15:45:58.122Open2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dll
10/9/2020 - 15:45:58.215Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:45:58.215Open2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dll
10/9/2020 - 15:45:58.215Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:45:58.262Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:45:58.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:45:58.356Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:45:58.403Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:45:58.450Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:45:58.497Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:58.497Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:58.497Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:45:58.497Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:58.497Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:58.497Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:58.543Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:58.543Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:58.543Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll
10/9/2020 - 15:45:58.543Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:58.543Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:45:58.543Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll
10/9/2020 - 15:45:58.543Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a
10/9/2020 - 15:45:58.637Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a
10/9/2020 - 15:45:58.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:45:58.684Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:45:58.731Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:45:58.778Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:45:58.825Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:45:58.872Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:45:58.918Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:45:58.965Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:45:59.12Open2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dll
10/9/2020 - 15:45:59.106Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:45:59.106Open2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dll
10/9/2020 - 15:45:59.106Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:45:59.153Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:45:59.200Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:45:59.247Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:45:59.293Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:45:59.340Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:45:59.387Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:45:59.434Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:45:59.481Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:45:59.528Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:45:59.575Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:45:59.622Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:45:59.668Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:45:59.715Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:45:59.762Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:45:59.809Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:45:59.856Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:45:59.903Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089
10/9/2020 - 15:45:59.950Unknown2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089
10/9/2020 - 15:45:59.950Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:45:59.997Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:46:0.43Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:46:0.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:46:0.137Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:46:0.184Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:46:0.231Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:46:0.278Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:46:0.325Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
10/9/2020 - 15:46:0.325Unknown2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:46:0.325Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
10/9/2020 - 15:46:0.325Unknown2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:46:0.325Open2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
10/9/2020 - 15:46:0.325Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:46:0.372Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:46:0.418Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:46:0.465Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:46:0.512Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:46:0.559Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:46:0.606Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:46:0.606Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:46:0.653Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:46:0.700Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:46:0.700Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:46:0.700Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:46:0.700Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:46:0.700Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:46:0.700Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:46:0.700Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.configmachine.config
10/9/2020 - 15:46:0.700Open2088C:\Monitor\proc.exeC:\Monitor\proc.exe.config
10/9/2020 - 15:46:0.700Open2088C:\Monitor\proc.exeC:\Monitor\proc.exe.config
10/9/2020 - 15:46:0.747Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:46:0.793Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:0.840Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:46:0.887Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:46:0.934Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:46:0.981Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:46:1.28Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:46:1.75Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:46:1.122Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b82d8b2e7e18c7caf27b8017c6c615\System.Configuration.ni.dllSystem.Configuration.ni.dll
10/9/2020 - 15:46:1.168Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:1.215Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dllmscorlib.ni.dll
10/9/2020 - 15:46:1.262Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:1.309Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:1.356Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:1.403Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:1.450Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:1.497Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:1.543Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll
10/9/2020 - 15:46:1.590Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:1.637Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:1.684Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:1.731Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:1.778Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:1.825Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:1.872Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:1.918Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:1.965Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:2.12Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:2.59Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:2.106Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:2.153Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:2.153Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:2.153Open2088C:\Monitor\proc.exeC:\Monitor\dnsapi.dll
10/9/2020 - 15:46:2.153Open2088C:\Monitor\proc.exeC:\Monitor\dnsapi.dll
10/9/2020 - 15:46:2.153Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\dnsapi.dll
10/9/2020 - 15:46:2.153Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\dnsapi.dll
10/9/2020 - 15:46:2.153Open2088C:\Monitor\proc.exeC:\Monitor\IPHLPAPI.DLL
10/9/2020 - 15:46:2.153Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\IPHLPAPI.DLL
10/9/2020 - 15:46:2.153Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\IPHLPAPI.DLL
10/9/2020 - 15:46:2.153Open2088C:\Monitor\proc.exeC:\Monitor\WINNSI.DLL
10/9/2020 - 15:46:2.153Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\winnsi.dll
10/9/2020 - 15:46:2.153Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\winnsi.dll
10/9/2020 - 15:46:26.262Open2088C:\Monitor\proc.exeC:\Monitor\rasadhlp.dll
10/9/2020 - 15:46:26.262Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\rasadhlp.dll
10/9/2020 - 15:46:26.262Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\rasadhlp.dll
10/9/2020 - 15:46:26.903Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:26.903Open2088C:\Monitor\proc.exeC:\Windows\SysWOW64\pt-BR\KernelBase.dll.mui
10/9/2020 - 15:46:26.950Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:26.997Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:26.997Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:26.997Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:26.997Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:26.997Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:27.43Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
10/9/2020 - 15:46:27.43Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
10/9/2020 - 15:46:27.43Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
10/9/2020 - 15:46:27.43Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
10/9/2020 - 15:46:27.43Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
10/9/2020 - 15:46:27.43Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
10/9/2020 - 15:46:27.43Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
10/9/2020 - 15:46:27.90Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:46:27.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
10/9/2020 - 15:46:27.90Open2088C:\Monitor\proc.exeC:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.pdb
10/9/2020 - 15:46:27.90Read2088C:\Monitor\proc.exeC:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dlldiasymreader.dll
10/9/2020 - 15:46:27.90Open2088C:\Monitor\proc.exeC:\Windows\symbols\dll\System.pdb
10/9/2020 - 15:46:27.90Open2088C:\Monitor\proc.exeC:\Windows\dll\System.pdb
10/9/2020 - 15:46:27.90Open2088C:\Monitor\proc.exeC:\Windows\System.pdb
10/9/2020 - 15:46:27.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:27.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:27.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:27.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:27.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:27.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System\67c97ffbe01458a63ecb518c7444c1f1\System.ni.dllSystem.ni.dll
10/9/2020 - 15:46:27.90Read2088C:\Monitor\proc.exeC:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ef4a32979d02a76972d22c8161778f10\System.Xml.ni.dllSystem.Xml.ni.dll

Process
Trace
10/9/2020 - 15:45:43.762Create1480C:\malware.exe2088C:\Monitor\proc.exe

Analysis
Reason
Timeout

Status
Sucessfully Executed

Results
1

Registry
Trace

File Summary
Created
Identified: True check_circle

Deleted
Identified: False cancel

Process Summary
Created
Identified: True check_circle

Deleted
Identified: False cancel

Registry Summary
Proxy
Identified: False cancel

AutoRun
Identified: False cancel

Created
Identified: False cancel

Deleted
Identified: False cancel

Browsers
Identified: False cancel

Internet
Identified: False cancel

Loading...

DNS
Query
computer localhost arrow_forward computer gateway:50043 code newworks.sinsincity.com.
computer localhost arrow_forward 8.8.4.4:DNS code newworks.sinsincity.com.
computer localhost arrow_forward computer gateway:59829 code dns.msftncsi.com.
computer localhost arrow_forward computer gateway:58555 code newworks2050.sinsincity.com.
computer localhost arrow_forward computer gateway:DNS code newworks.sinsincity.com.
computer localhost arrow_forward 8.8.4.4:DNS code newworks2050.sinsincity.com.
computer localhost arrow_forward 8.8.8.8:DNS code newworks2050.sinsincity.com.
computer localhost arrow_forward 8.8.8.8:DNS code newworks.sinsincity.com.
computer localhost arrow_forward computer gateway:DNS code dns.msftncsi.com.
computer localhost arrow_forward computer gateway:DNS code newworks2050.sinsincity.com.

Response
computer gateway:DNS arrow_forward computer localhost code dns.msftncsi.com. reply_all 131.107.255.255


TCP
Info

UDP
Info
computer localhost:49222 arrow_forward 8.8.4.4:53
computer localhost:60493 arrow_forward 8.8.4.4:53
computer localhost:51595 arrow_forward 8.8.4.4:53
computer localhost:53 arrow_forward computer localhost:58555
computer localhost:49372 arrow_forward 8.8.8.8:53
computer localhost:53 arrow_forward computer localhost:50043
computer localhost:49551 arrow_forward 8.8.8.8:53
computer localhost:50273 arrow_forward 8.8.8.8:53
computer localhost:50043 arrow_forward computer localhost:53
computer localhost:55394 arrow_forward 8.8.4.4:53
computer localhost:59829 arrow_forward computer localhost:53
computer localhost:59735 arrow_forward 8.8.8.8:53
computer localhost:58036 arrow_forward 8.8.4.4:53
computer localhost:52364 arrow_forward 8.8.4.4:53
computer localhost:58385 arrow_forward 8.8.4.4:53
computer localhost:51874 arrow_forward 8.8.4.4:53
computer localhost:53 arrow_forward computer localhost:59829
computer localhost:58555 arrow_forward computer localhost:53
computer localhost:57912 arrow_forward 8.8.8.8:53
computer localhost:55480 arrow_forward 8.8.8.8:53
computer localhost:54285 arrow_forward 8.8.8.8:53
computer localhost:56655 arrow_forward 8.8.8.8:53

HTTP
Info

Summary
DNS
True check_circle

TCP
False cancel

UDP
True check_circle

HTTP
False cancel

Results
BINARY
NFS 2.0 (Threshold = 0.8)
confidence: 75.00%
suspicious: False cancel

Decision Tree (NFS-BRMalware)
confidence: 100.00%
suspicious: True check_circle

MalConv (Ember: Raw Bytes, Threshold=0.5)
confidence: 75.44%
suspicious: False cancel

Random Forest (100 estimators, NFS-BRMalware)
confidence: 60.00%
suspicious: False cancel

Non-Negative MalConv (Ember: Raw Bytes, Threshold=0.35)
confidence: 72.09%
suspicious: True check_circle

LightGDM (Ember: File Characteristics, Threshold=0.8336)
confidence: 95.17%
suspicious: True check_circle

Add to Collection
Download