https://pastein.ru/t/0XS
Загрузка данных
Services\ mod
PrintWorkflow_2fd1b 10.0.18362.1 Microsoft Corporation Manual C:\Windows\system32\svchost.exe 2019-03-19 07:44.33 53,744 old
10.0.18362.1 Microsoft Corporation Run Manual C:\Windows\system32\svchost.exe 2019-03-19 07:44.33 53,744 new
Помощник по входу в учетную запись Майкрософт 10.0.18362.1 Microsoft Corporation Run Manual C:\Windows\system32\svchost.exe 2019-03-19 07:44.33 53,744 old
10.0.18362.1 Microsoft Corporation Manual C:\Windows\system32\svchost.exe 2019-03-19 07:44.33 53,744 new
Running Processes\ mod
Microsoft Office 2016 16.0.4627.1000 Microsoft Corporation C:\Program Files\Microsoft Office\Office16\WINWORD.EXE 2017-11-15 15:35.08 1,939,112 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation C:\Windows\system32\wbem\wmiprvse.exe 2019-03-19 07:44.00 483,840 del
Windows® Search 7.0.18362.1 Microsoft Corporation C:\Windows\system32\SearchProtocolHost.exe 2019-03-19 07:44.11 401,408 del
Windows® Search 7.0.18362.1 Microsoft Corporation C:\Windows\system32\SearchProtocolHost.exe 2019-03-19 07:44.11 401,408 add
Windows® Search 7.0.18362.1 Microsoft Corporation C:\Windows\system32\SearchProtocolHost.exe 2019-03-19 07:44.11 401,408 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation C:\Windows\ImmersiveControlPanel\SystemSettings.exe 2019-03-19 07:46.39 96,032 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation C:\Windows\system32\svchost.exe 2019-03-19 07:44.33 53,744 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation C:\Windows\system32\svchost.exe 2019-03-19 07:44.33 53,744 add
Running Processes\ApplicationFrameHost.exe -Embedding\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Key HKLM\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\windows.immersivecontrolpanel_cw5n1h2txyewy\SplashScreen\windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\windows.immersivecontrolpanel_cw5n1h2txyewy\PersistedTitleBarData add
Running Processes\browser_broker.exe -Embedding\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\ctfmon.exe\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\DefenderSessionHelper.exe\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\dwm.exe\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\Explorer.EXE\ mod
Internet Explorer 11.0.18362.145 Microsoft Corporation c:\windows\system32\ieframe.dll 2019-06-12 04:33.52 7,103,488 add
Internet Explorer 11.0.18362.1 Microsoft Corporation c:\windows\system32\msiso.dll 2019-03-19 07:44.50 308,736 add
Microsoft® Windows® Operating System 10.0.18362.145 Microsoft Corporation c:\windows\system32\capabilityaccessmanagerclient.dll 2019-06-12 04:33.38 226,816 del
Microsoft® Windows® Operating System 10.0.18362.113 Microsoft Corporation c:\windows\system32\cryptdll.dll 2019-06-12 04:33.42 66,360 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\execmodelproxy.dll 2019-03-19 07:44.03 83,456 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\netapi32.dll 2019-03-19 07:44.00 80,600 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\shellcommoncommonproxystub.dll 2019-03-19 07:43.57 649,728 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\userdatatimeutil.dll 2019-03-19 07:44.15 121,344 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.staterepositorybroker.dll 2019-03-19 07:44.15 104,464 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windowsinternal.composableshell.desktophosting.dll 2019-03-19 07:44.25 191,488 del
Windows Installer - Unicode 5.0.18362.1 Microsoft Corporation c:\windows\system32\msiltcfg.dll 2019-03-19 07:45.45 21,504 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\capauthz.dll 2019-03-19 07:44.01 313,016 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\execmodelclient.dll 2019-03-19 07:44.03 318,176 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\lockappbroker.dll 2019-03-19 07:44.52 439,296 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\mlang.dll 2019-03-19 07:44.58 245,760 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\playtodevice.dll 2019-03-19 07:45.35 392,192 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\provsvc.dll 2019-03-19 07:45.56 468,480 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\srpapi.dll 2019-03-19 07:44.28 159,232 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.system.launcher.dll 2019-03-19 07:44.03 728,576 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.ui.appdefaults.dll 2019-03-19 07:43.57 265,728 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\wpdshext.dll 2019-03-19 14:36.59 614,912 del
Служба Windows® Search 7.0.18362.1 Microsoft Corporation c:\windows\system32\tquery.dll 2019-03-19 07:44.11 3,263,488 add
Running Processes\Explorer.EXE\Opened Handles\ mod
File \Device\CNG del
File \Device\DeviceApi del
File \Device\KsecDD del
File \Device\Nsi del
File \Device\WMIDataDevice del
File \FileSystem\Filters\FltMgrMsg del
Directory \KnownDlls del
Directory \Sessions\1\BaseNamedObjects del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Program Files\Windows Defender\ru-RU\shellext.dll.mui 2023-06-12 02:28.21 13,720 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\acppage.dll.mui 2023-06-12 02:28.22 27,040 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\ActionCenter.dll.mui 2023-06-12 02:28.22 59,296 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\ApplicationFrame.dll.mui 2023-06-12 02:28.22 13,720 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\bthprops.cpl.mui 2023-06-12 02:28.22 27,544 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\crypt32.dll.mui 2023-06-12 02:28.22 55,704 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\dui70.dll.mui 2023-06-12 02:28.22 15,248 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\explorerframe.dll.mui 2023-06-12 02:28.22 37,792 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\hcproviders.dll.mui 2023-06-12 02:28.23 17,824 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\InputSwitch.dll.mui 2023-06-12 02:28.23 18,848 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\mpr.dll.mui 2023-06-12 02:28.23 12,704 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\oleaccrc.dll.mui 2023-06-12 02:28.23 30,616 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\pnidui.dll.mui 2023-06-12 02:28.23 18,840 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\propsys.dll.mui 2023-06-12 02:28.24 94,112 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\sndvolsso.dll.mui 2023-06-12 02:28.24 17,312 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\stobject.dll.mui 2023-06-12 02:28.24 18,848 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\twext.dll.mui 2023-06-12 02:28.24 16,280 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\twinui.pcshell.dll.mui 2023-06-12 02:28.24 16,288 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\UIRibbon.dll.mui 2023-06-12 02:28.24 50,056 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\user32.dll.mui 2023-06-12 02:28.24 29,576 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\windows.storage.dll.mui 2023-06-12 02:28.24 40,864 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\winnlsres.dll.mui 2023-06-12 02:28.24 78,240 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\wscui.cpl.mui 2023-06-12 02:28.25 98,200 del
Directory C:\Program Files\WindowsApps\Microsoft.XboxGameOverlay_1.54.4001.0_x64__8wekyb3d8bbwe del
Directory C:\ProgramData\Microsoft\Windows\Start Menu del
Directory C:\ProgramData\Microsoft\Windows\Start Menu\Programs del
Directory C:\ProgramData\Microsoft\Windows\WER\ReportArchive del
Directory C:\Users\Public\Desktop del
Directory C:\Users\user\AppData\Local\Microsoft\GameDVR del
File C:\Users\user\AppData\Local\Microsoft\GameDVR\KnownGameList.bin 2026-10-05 20:31.00 1,848,932 del
Directory C:\Users\user\AppData\Local\Microsoft\Windows\Burn del
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db 2023-06-12 15:55.27 1,048,576 del
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db 2026-10-05 20:34.56 2,097,152 del
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db 2026-10-07 00:07.58 4,194,304 del
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db 2026-10-05 21:58.11 116,496 del
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db 2023-06-12 15:55.30 1,048,576 del
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db 2023-06-12 15:55.30 1,048,576 del
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db 2023-06-12 15:55.30 1,048,576 del
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db 2023-06-12 15:55.30 1,048,576 del
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db 2023-09-08 11:07.24 29,232 del
Directory C:\Users\user\AppData\Local\Microsoft\Windows\WER\ERC del
Directory C:\Users\user\AppData\Local\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\LocalCache del
Directory C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned del
Directory C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries del
Directory C:\Users\user\AppData\Roaming\Microsoft\Windows\Network Shortcuts del
Directory C:\Users\user\AppData\Roaming\Microsoft\Windows\Printer Shortcuts del
Directory C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu del
Directory C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs del
Directory C:\Users\user\Desktop del
Directory C:\Users\user\Desktop\lab1 del
Directory C:\Users\user\Desktop\lab1\src del
Directory C:\Users\user\Documents del
Directory C:\Users\user\Downloads del
Directory C:\Users\user\Pictures del
Directory C:\Windows\bcastdvr del
File C:\Windows\Fonts\segoeui.ttf 2019-03-19 07:44.11 955,804 del
File C:\Windows\Fonts\seguisb.ttf 2019-03-19 07:44.11 971,080 del
File C:\Windows\Fonts\seguisym.ttf 2019-03-19 07:44.11 2,454,728 del
File C:\Windows\Fonts\StaticCache.dat 2019-06-12 04:33.43 19,333,120 del
File C:\Windows\Registration\R000000000006.clb 2023-06-12 00:13.07 27,356 del
File C:\Windows\ru-RU\explorer.exe.mui 2019-03-19 14:34.27 14,848 del
Directory C:\Windows\System32 del
File C:\Windows\System32\ru-RU\combase.dll.mui 2019-03-19 14:34.30 40,960 del
File C:\Windows\System32\ru-RU\dsreg.dll.mui 2019-06-12 04:33.59 47,104 del
File C:\Windows\System32\ru-RU\KernelBase.dll.mui 2019-03-19 14:34.31 1,342,464 del
File C:\Windows\System32\ru-RU\shell32.dll.mui 2019-03-19 14:34.32 478,720 del
File C:\Windows\SystemResources\ExplorerFrame.dll.mun 2019-03-19 07:45.05 2,640,896 del
File C:\Windows\SystemResources\imageres.dll.mun 2019-03-19 07:43.55 22,571,008 del
File C:\Windows\SystemResources\shell32.dll.mun 2019-06-12 04:33.41 14,768,128 del
File C:\Windows\SystemResources\SndVolSSO.dll.mun 2019-03-19 07:44.28 587,776 del
File C:\Windows\SystemResources\stobject.dll.mun 2019-03-19 07:43.55 132,608 del
Directory C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.18362.175_ru-ru_45f00bb890bb425d del
File C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.18362.175_ru-ru_45f00bb890bb425d\comctl32.dll.mui 2019-06-12 04:33.42 12,288 del
Directory C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.175_none_e6c3ab1f131014c9 del
Directory C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.175_none_17ae9e046da28e97 del
Key HKLM del
Key HKLM\SOFTWARE del
Key HKLM\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance del
Key HKLM\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance del
Key HKLM\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance del
Key HKLM\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance del
Key HKLM\SOFTWARE\Classes\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\Instance del
Key HKLM\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance del
Key HKLM\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2292890337-69778762-837601055-1001\{423E7EBB-BF08-4F3C-BDD4-1157292FC53C} del
Key HKLM\SOFTWARE\Classes\PackagedCom del
Key HKLM\SOFTWARE\Classes\PackagedCom\ClassIndex del
Key HKLM\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config del
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\CA del
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed del
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Root del
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Trust del
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople del
Key HKLM\SOFTWARE\Microsoft\IdentityStore\Providers del
Key HKLM\SOFTWARE\Microsoft\Internet Explorer\Main del
Key HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl del
Key HKLM\SOFTWARE\Microsoft\Internet Explorer\Security del
Key HKLM\SOFTWARE\Microsoft\KGL\OneSettings del
Key HKLM\SOFTWARE\Microsoft\MSF\Registration\Listen del
Key HKLM\SOFTWARE\Microsoft\Ole del
Key HKLM\SOFTWARE\Microsoft\PlayToReceiver del
Key HKLM\SOFTWARE\Microsoft\Security Center del
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot del
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\CA del
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\Disallowed del
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\ROOT del
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot del
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\trust del
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople del
Key HKLM\SOFTWARE\Microsoft\TabletTip\1.7 del
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options del
Key HKLM\SOFTWARE\Microsoft\Windows Search\CrawlScopeManager\Windows\SystemIndex\SearchRoots del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CommandStore del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell\Windows.help del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell\Windows.newfolder del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell\Windows.properties del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell\Windows.redo del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell\Windows.rename del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell\Windows.RibbonDelete del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell\Windows.undo del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\DelegateFolders del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2112AB0A-C86A-4ffe-A368-0DE96E47012E}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2400183A-6185-49FB-A2D8-4A392A602BA3}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{24D89E24-2F19-4534-9DDE-6A6671FBB8FE}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2B20DF75-1EDA-4039-8097-38798227D5B7}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{339719B5-8C47-4894-94C2-D8F77ADD44A6}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{33E28130-4E1E-4676-835A-98395C3BC3BB}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{374DE290-123F-4565-9164-39C4925E467B}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{491E922F-5643-4af4-A7EB-4E7A138D8174}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{4BD8D571-6D19-48D3-BE97-422220080E43}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52528A6B-B9E3-4add-B60D-588C2DBA842D}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{56784854-C6CB-462B-8169-88E350ACB882}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{767E6811-49CB-4273-87C2-20F355E1085B}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7b0db17d-9cd2-4a93-9733-46cc89022e7c}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9B74B6A3-0DFD-4f11-9E78-5F7800F2E772}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A302545D-DEFF-464b-ABE8-61C8648D939B}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A990AE9F-A03B-4e80-94BC-9912D7504104}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C3F2459E-80D6-45DC-BFEF-1F769F2BE730}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{E25B5812-BE88-4bd9-94B0-29233477B6C3}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f3ce0f7c-4901-4acc-8648-d5d44b04ef8f}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SyncRootManager del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\PerceptionSimulationExtensions del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SignalManager\Peek\CacheStore del
Key HKLM\SOFTWARE\Microsoft\Windows\Shell del
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime del
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId del
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\Server del
Key HKLM\SOFTWARE\Policies del
Key HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates del
Key HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings del
Key HKLM\SOFTWARE\WOW6432Node del
Key HKLM\SYSTEM\ControlSet001\Control\NetworkProvider\HwOrder del
Key HKLM\SYSTEM\ControlSet001\Control\NetworkProvider\ProviderOrder del
Key HKLM\SYSTEM\ControlSet001\Control\NetworkUxManager del
Key HKLM\SYSTEM\ControlSet001\Control\Nls\CodePage del
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids del
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions del
Key HKLM\SYSTEM\ControlSet001\Control\Session Manager del
Key HKLM\SYSTEM\ControlSet001\Services\crypt32 del
Key HKU del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001 del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Control Panel\Colors del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Control Panel\Desktop del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Control Panel\Keyboard del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\GameBar del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Internet Explorer\Main del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Internet Explorer\Security del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\MSF\Registration\Listen del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\CA del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\Disallowed del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\Root del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\SmartCardRoot del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\trust del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\TrustedPeople del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\TabletTip\1.7 del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows NT\CurrentVersion del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ActivityDataModel\ReaderRevisionInfo del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${acee881c-40d8-4c2f-b63e-fcc3351fd8e4}$$windows.data.unifiedtile.localstarttilepropertiesmap\Current del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${acee881c-40d8-4c2f-b63e-fcc3351fd8e4}$$windows.data.unifiedtile.localstartvolatiletilepropertiesmap\Current del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Cloud\default$windows.data.bluelightreduction.bluelightreductionstate\windows.data.bluelightreduction.bluelightreductionstate del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Cloud\default$windows.data.bluelightreduction.settings\windows.data.bluelightreduction.settings del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Current\default$windows.data.bluelightreduction.bluelightreductionstate\windows.data.bluelightreduction.bluelightreductionstate del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Current\default$windows.data.bluelightreduction.settings\windows.data.bluelightreduction.settings del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\BannerStore del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ImmersiveShell\PersistedApplicationData\Volatile del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ModeTriggerCachedKey del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\VirtualDesktops del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{9E04CAB2-CC14-11DF-BB8C-A2F1DED72085}\Count del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{A3D53349-6E61-4557-8FC7-0028EDCEEBF6}\Count del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{B267E3AD-A825-4A09-82B9-EEC22AA3B847}\Count del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{BCB48336-4DDD-48FF-BB0B-D3190DACB3E2}\Count del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CAA59E3C-4792-41A5-9909-6A6A8D32490E}\Count del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{F2A1CB5A-E3CC-4A2E-AF9D-505A7009D442}\Count del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\Count del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{FA99DFC7-6AC2-453A-A5E2-5E2AFF4507BD}\Count del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\VirtualDesktops del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\GameDVR del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Holographic del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\SignalManager\Peek\CacheStore del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\Shell del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\Shell\Bags\1\Desktop del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Policies del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Policies\Microsoft\SystemCertificates del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\WorkFolders del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\66\Shell del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\66\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\68\Shell del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\68\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache del
File \Device\CNG add
File \Device\DeviceApi add
File \Device\KsecDD add
File \Device\Nsi add
File \Device\WMIDataDevice add
File \FileSystem\Filters\FltMgrMsg add
Directory \KnownDlls add
Directory \Sessions\1\BaseNamedObjects add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Program Files\Windows Defender\ru-RU\shellext.dll.mui 2023-06-12 02:28.21 13,720 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\acppage.dll.mui 2023-06-12 02:28.22 27,040 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\ActionCenter.dll.mui 2023-06-12 02:28.22 59,296 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\ApplicationFrame.dll.mui 2023-06-12 02:28.22 13,720 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\bthprops.cpl.mui 2023-06-12 02:28.22 27,544 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\crypt32.dll.mui 2023-06-12 02:28.22 55,704 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\dui70.dll.mui 2023-06-12 02:28.22 15,248 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\explorerframe.dll.mui 2023-06-12 02:28.22 37,792 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\hcproviders.dll.mui 2023-06-12 02:28.23 17,824 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\InputSwitch.dll.mui 2023-06-12 02:28.23 18,848 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\mpr.dll.mui 2023-06-12 02:28.23 12,704 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\oleaccrc.dll.mui 2023-06-12 02:28.23 30,616 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\pnidui.dll.mui 2023-06-12 02:28.23 18,840 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\propsys.dll.mui 2023-06-12 02:28.24 94,112 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\sndvolsso.dll.mui 2023-06-12 02:28.24 17,312 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\stobject.dll.mui 2023-06-12 02:28.24 18,848 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\twext.dll.mui 2023-06-12 02:28.24 16,280 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\twinui.pcshell.dll.mui 2023-06-12 02:28.24 16,288 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\UIRibbon.dll.mui 2023-06-12 02:28.24 50,056 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\user32.dll.mui 2023-06-12 02:28.24 29,576 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\windows.storage.dll.mui 2023-06-12 02:28.24 40,864 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\winnlsres.dll.mui 2023-06-12 02:28.24 78,240 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\wscui.cpl.mui 2023-06-12 02:28.25 98,200 add
Directory C:\Program Files\WindowsApps\Microsoft.XboxGameOverlay_1.54.4001.0_x64__8wekyb3d8bbwe add
Directory C:\ProgramData\Microsoft\Windows\Start Menu add
Directory C:\ProgramData\Microsoft\Windows\Start Menu\Programs add
Directory C:\ProgramData\Microsoft\Windows\WER\ReportArchive add
Directory C:\Users\Public\Desktop add
Directory C:\Users\user\AppData\Local\Microsoft\GameDVR add
File C:\Users\user\AppData\Local\Microsoft\GameDVR\KnownGameList.bin 2026-10-05 20:31.00 1,848,932 add
Directory C:\Users\user\AppData\Local\Microsoft\Windows\Burn add
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db 2023-06-12 15:55.27 1,048,576 add
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db 2026-10-05 20:34.56 2,097,152 add
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db 2026-10-07 00:07.58 4,194,304 add
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db 2026-10-05 21:58.11 116,496 add
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db 2023-06-12 15:55.30 1,048,576 add
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db 2023-06-12 15:55.30 1,048,576 add
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db 2023-06-12 15:55.30 1,048,576 add
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db 2023-06-12 15:55.30 1,048,576 add
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db 2023-09-08 11:07.24 29,232 add
Directory C:\Users\user\AppData\Local\Microsoft\Windows\WER\ERC add
Directory C:\Users\user\AppData\Local\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\LocalCache add
Directory C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned add
Directory C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries add
Directory C:\Users\user\AppData\Roaming\Microsoft\Windows\Network Shortcuts add
Directory C:\Users\user\AppData\Roaming\Microsoft\Windows\Printer Shortcuts add
Directory C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu add
Directory C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs add
Directory C:\Users\user\Desktop add
Directory C:\Users\user\Desktop\lab1 add
Directory C:\Users\user\Desktop\lab1\src add
Directory C:\Users\user\Documents add
Directory C:\Users\user\Downloads add
Directory C:\Users\user\Pictures add
Directory C:\Windows\bcastdvr add
File C:\Windows\Fonts\segoeui.ttf 2019-03-19 07:44.11 955,804 add
File C:\Windows\Fonts\seguisb.ttf 2019-03-19 07:44.11 971,080 add
File C:\Windows\Fonts\seguisym.ttf 2019-03-19 07:44.11 2,454,728 add
File C:\Windows\Fonts\StaticCache.dat 2019-06-12 04:33.43 19,333,120 add
File C:\Windows\Registration\R000000000006.clb 2023-06-12 00:13.07 27,356 add
File C:\Windows\ru-RU\explorer.exe.mui 2019-03-19 14:34.27 14,848 add
Directory C:\Windows\System32 add
File C:\Windows\System32\ru-RU\combase.dll.mui 2019-03-19 14:34.30 40,960 add
File C:\Windows\System32\ru-RU\dsreg.dll.mui 2019-06-12 04:33.59 47,104 add
File C:\Windows\System32\ru-RU\ieframe.dll.mui 2019-03-19 14:34.16 1,805,824 add
File C:\Windows\System32\ru-RU\KernelBase.dll.mui 2019-03-19 14:34.31 1,342,464 add
File C:\Windows\System32\ru-RU\shell32.dll.mui 2019-03-19 14:34.32 478,720 add
File C:\Windows\SystemResources\ExplorerFrame.dll.mun 2019-03-19 07:45.05 2,640,896 add
File C:\Windows\SystemResources\imageres.dll.mun 2019-03-19 07:43.55 22,571,008 add
File C:\Windows\SystemResources\shell32.dll.mun 2019-06-12 04:33.41 14,768,128 add
File C:\Windows\SystemResources\SndVolSSO.dll.mun 2019-03-19 07:44.28 587,776 add
File C:\Windows\SystemResources\stobject.dll.mun 2019-03-19 07:43.55 132,608 add
Directory C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.18362.175_ru-ru_45f00bb890bb425d add
File C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.18362.175_ru-ru_45f00bb890bb425d\comctl32.dll.mui 2019-06-12 04:33.42 12,288 add
Directory C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.175_none_e6c3ab1f131014c9 add
Directory C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.175_none_17ae9e046da28e97 add
Key HKLM add
Key HKLM\SOFTWARE add
Key HKLM\SOFTWARE\Classes add
Key HKLM\SOFTWARE\Classes\Applications\winword.exe add
Key HKLM\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance add
Key HKLM\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance add
Key HKLM\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance add
Key HKLM\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance add
Key HKLM\SOFTWARE\Classes\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\Instance add
Key HKLM\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance add
Key HKLM\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2292890337-69778762-837601055-1001\{423E7EBB-BF08-4F3C-BDD4-1157292FC53C} add
Key HKLM\SOFTWARE\Classes\PackagedCom add
Key HKLM\SOFTWARE\Classes\PackagedCom\ClassIndex add
Key HKLM\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config add
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\CA add
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed add
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Root add
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Trust add
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople add
Key HKLM\SOFTWARE\Microsoft\IdentityStore\Providers add
Key HKLM\SOFTWARE\Microsoft\Internet Explorer\Main add
Key HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl add
Key HKLM\SOFTWARE\Microsoft\Internet Explorer\Security add
Key HKLM\SOFTWARE\Microsoft\KGL\OneSettings add
Key HKLM\SOFTWARE\Microsoft\MSF\Registration\Listen add
Key HKLM\SOFTWARE\Microsoft\Ole add
Key HKLM\SOFTWARE\Microsoft\PlayToReceiver add
Key HKLM\SOFTWARE\Microsoft\Security Center add
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot add
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\CA add
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\Disallowed add
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\ROOT add
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot add
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\trust add
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople add
Key HKLM\SOFTWARE\Microsoft\TabletTip\1.7 add
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options add
Key HKLM\SOFTWARE\Microsoft\Windows Search\CrawlScopeManager\Windows\SystemIndex\SearchRoots add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CommandStore add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell\Windows.help add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell\Windows.newfolder add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell\Windows.properties add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell\Windows.redo add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell\Windows.rename add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell\Windows.RibbonDelete add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell\Windows.undo add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\DelegateFolders add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2112AB0A-C86A-4ffe-A368-0DE96E47012E}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2400183A-6185-49FB-A2D8-4A392A602BA3}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{24D89E24-2F19-4534-9DDE-6A6671FBB8FE}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2B20DF75-1EDA-4039-8097-38798227D5B7}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{339719B5-8C47-4894-94C2-D8F77ADD44A6}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{33E28130-4E1E-4676-835A-98395C3BC3BB}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{374DE290-123F-4565-9164-39C4925E467B}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{491E922F-5643-4af4-A7EB-4E7A138D8174}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{4BD8D571-6D19-48D3-BE97-422220080E43}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52528A6B-B9E3-4add-B60D-588C2DBA842D}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{56784854-C6CB-462B-8169-88E350ACB882}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{767E6811-49CB-4273-87C2-20F355E1085B}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7b0db17d-9cd2-4a93-9733-46cc89022e7c}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9B74B6A3-0DFD-4f11-9E78-5F7800F2E772}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A302545D-DEFF-464b-ABE8-61C8648D939B}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A990AE9F-A03B-4e80-94BC-9912D7504104}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C3F2459E-80D6-45DC-BFEF-1F769F2BE730}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{E25B5812-BE88-4bd9-94B0-29233477B6C3}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f3ce0f7c-4901-4acc-8648-d5d44b04ef8f}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SyncRootManager add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\PerceptionSimulationExtensions add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SignalManager\Peek\CacheStore add
Key HKLM\SOFTWARE\Microsoft\Windows\Shell add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\Server add
Key HKLM\SOFTWARE\Policies add
Key HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates add
Key HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings add
Key HKLM\SOFTWARE\WOW6432Node add
Key HKLM\SYSTEM\ControlSet001\Control\NetworkProvider\HwOrder add
Key HKLM\SYSTEM\ControlSet001\Control\NetworkProvider\ProviderOrder add
Key HKLM\SYSTEM\ControlSet001\Control\NetworkUxManager add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\CodePage add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions add
Key HKLM\SYSTEM\ControlSet001\Control\Session Manager add
Key HKLM\SYSTEM\ControlSet001\Services\crypt32 add
Key HKU add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001 add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Control Panel\Colors add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Control Panel\Desktop add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Control Panel\Keyboard add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\GameBar add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Internet Explorer\Main add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Internet Explorer\Security add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\MSF\Registration\Listen add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\CA add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\Disallowed add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\Root add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\SmartCardRoot add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\trust add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\TrustedPeople add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\TabletTip\1.7 add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows NT\CurrentVersion add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ActivityDataModel\ReaderRevisionInfo add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${acee881c-40d8-4c2f-b63e-fcc3351fd8e4}$$windows.data.unifiedtile.localstarttilepropertiesmap\Current add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${acee881c-40d8-4c2f-b63e-fcc3351fd8e4}$$windows.data.unifiedtile.localstartvolatiletilepropertiesmap\Current add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Cloud\default$windows.data.bluelightreduction.bluelightreductionstate\windows.data.bluelightreduction.bluelightreductionstate add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Cloud\default$windows.data.bluelightreduction.settings\windows.data.bluelightreduction.settings add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Current\default$windows.data.bluelightreduction.bluelightreductionstate\windows.data.bluelightreduction.bluelightreductionstate add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Current\default$windows.data.bluelightreduction.settings\windows.data.bluelightreduction.settings add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\BannerStore add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ImmersiveShell\PersistedApplicationData\Volatile add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ModeTriggerCachedKey add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\VirtualDesktops add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{9E04CAB2-CC14-11DF-BB8C-A2F1DED72085}\Count add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{A3D53349-6E61-4557-8FC7-0028EDCEEBF6}\Count add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{B267E3AD-A825-4A09-82B9-EEC22AA3B847}\Count add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{BCB48336-4DDD-48FF-BB0B-D3190DACB3E2}\Count add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CAA59E3C-4792-41A5-9909-6A6A8D32490E}\Count add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{F2A1CB5A-E3CC-4A2E-AF9D-505A7009D442}\Count add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\Count add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{FA99DFC7-6AC2-453A-A5E2-5E2AFF4507BD}\Count add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\VirtualDesktops add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\GameDVR add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Holographic add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\SignalManager\Peek\CacheStore add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\Shell add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\Shell\Bags\1\Desktop add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Policies add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Policies\Microsoft\SystemCertificates add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\WorkFolders add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\66\Shell add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\66\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\68\Shell add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\68\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache add
Running Processes\fontdrvhost.exe\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\fontdrvhost.exe\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\lsass.exe\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\MicrosoftEdge.exe -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca\Opened Handles\ mod
File C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\~DFEBB2D9BE0E3B2FE9.TMP 2026-10-07 00:06.28 0 old
File C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\~DFEBB2D9BE0E3B2FE9.TMP 2026-10-07 00:06.44 16,384 new
Running Processes\Procmon64.exe\ mod
Internet Explorer 11.0.18362.175 Microsoft Corporation c:\windows\system32\urlmon.dll 2019-06-12 04:33.44 1,853,440 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcp47langs.dll 2019-03-19 07:44.15 369,504 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcp47mrm.dll 2019-03-19 07:44.15 186,672 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cldapi.dll 2019-03-19 07:44.28 105,984 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\coml2.dll 2019-03-19 07:44.15 477,240 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cryptbase.dll 2019-03-19 07:44.36 33,848 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cscapi.dll 2019-03-19 07:45.02 49,664 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\duser.dll 2019-03-19 07:44.47 578,560 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\globinputhost.dll 2019-03-19 07:44.15 130,560 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\linkinfo.dll 2019-03-19 07:44.30 30,720 add
Microsoft® Windows® Operating System 7.2.18362.1 Microsoft Corporation c:\windows\system32\oleacc.dll 2019-03-19 07:45.00 395,776 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\srvcli.dll 2019-03-19 07:44.35 112,088 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\sspicli.dll 2019-03-19 07:44.36 179,944 add
Microsoft® Windows® Operating System 10.0.18362.86 Microsoft Corporation c:\windows\system32\windows.globalization.dll 2019-06-12 04:33.37 1,784,832 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.staterepositoryps.dll 2019-03-19 07:44.15 1,274,336 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.storage.search.dll 2019-03-19 07:44.04 748,544 add
Windows® Search 7.0.18362.1 Microsoft Corporation c:\windows\system32\structuredquery.dll 2019-03-19 07:44.15 676,840 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\program files\common files\microsoft shared\ink\tiptsf.dll 2019-03-19 07:45.49 659,464 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\appresolver.dll 2019-03-19 07:44.21 558,344 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dui70.dll 2019-03-19 07:44.47 1,748,992 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\edputil.dll 2019-03-19 07:44.47 119,808 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ehstorshell.dll 2019-03-19 07:44.47 208,384 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\explorerframe.dll 2019-03-19 07:45.05 2,094,592 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\networkexplorer.dll 2019-03-19 07:44.48 76,288 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ntshrui.dll 2019-03-19 07:44.30 497,664 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\setupapi.dll 2019-03-19 07:45.00 4,683,784 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\slc.dll 2019-03-19 07:44.32 140,800 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\sppc.dll 2019-03-19 07:44.32 136,192 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\twinapi.dll 2019-03-19 07:44.33 636,416 add
Running Processes\Procmon64.exe\Opened Handles\ mod
File \Device\NamedPipe\srvsvc add
File \FileSystem\Filters\FltMgrMsg add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\explorerframe.dll.mui 2023-06-12 02:28.22 37,792 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\oleaccrc.dll.mui 2023-06-12 02:28.23 30,616 add
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db 2023-06-12 15:55.27 1,048,576 add
File C:\Windows\SystemResources\comdlg32.dll.mun 2019-03-19 07:45.05 352,768 add
File C:\Windows\SystemResources\ExplorerFrame.dll.mun 2019-03-19 07:45.05 2,640,896 add
File C:\Windows\SystemResources\shell32.dll.mun 2019-06-12 04:33.41 14,768,128 add
Key HKLM\SOFTWARE add
Key HKLM\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance add
Key HKLM\SOFTWARE\Classes\CLSID\{24ad3ad4-a569-4530-98e1-ab02f9417aa8}\Instance add
Key HKLM\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance add
Key HKLM\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance add
Key HKLM\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance add
Key HKLM\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance add
Key HKLM\SOFTWARE\Classes\CLSID\{d3162b92-9365-467a-956b-92703aca08af}\Instance add
Key HKLM\SOFTWARE\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance add
Key HKLM\SOFTWARE\Microsoft\Internet Explorer\Main add
Key HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl add
Key HKLM\SOFTWARE\Microsoft\Internet Explorer\Security add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2112AB0A-C86A-4ffe-A368-0DE96E47012E}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2400183A-6185-49FB-A2D8-4A392A602BA3}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{24D89E24-2F19-4534-9DDE-6A6671FBB8FE}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2B20DF75-1EDA-4039-8097-38798227D5B7}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{339719B5-8C47-4894-94C2-D8F77ADD44A6}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{33E28130-4E1E-4676-835A-98395C3BC3BB}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{374DE290-123F-4565-9164-39C4925E467B}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{491E922F-5643-4af4-A7EB-4E7A138D8174}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{4BD8D571-6D19-48D3-BE97-422220080E43}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52528A6B-B9E3-4add-B60D-588C2DBA842D}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{56784854-C6CB-462B-8169-88E350ACB882}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{767E6811-49CB-4273-87C2-20F355E1085B}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7b0db17d-9cd2-4a93-9733-46cc89022e7c}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9B74B6A3-0DFD-4f11-9E78-5F7800F2E772}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A302545D-DEFF-464b-ABE8-61C8648D939B}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A990AE9F-A03B-4e80-94BC-9912D7504104}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C3F2459E-80D6-45DC-BFEF-1F769F2BE730}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{E25B5812-BE88-4bd9-94B0-29233477B6C3}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f3ce0f7c-4901-4acc-8648-d5d44b04ef8f}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SyncRootManager add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings add
Key HKLM\SOFTWARE\Microsoft\Windows\Shell add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\Server add
Key HKLM\SOFTWARE\Policies add
Key HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings add
Key HKLM\SOFTWARE\WOW6432Node add
Key HKU add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Internet Explorer\Main add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Internet Explorer\Security add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Policies add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\Shell add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell add
Running Processes\RuntimeBroker.exe -Embedding\ mod
Microsoft® Windows® Operating System 10.0.18362.86 Microsoft Corporation c:\windows\system32\onecoreuapcommonproxystub.dll 2019-06-12 04:33.37 7,831,368 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.cortana.proxystub.dll 2019-03-19 07:45.03 128,512 del
Windows® Search 7.0.18362.1 Microsoft Corporation c:\windows\system32\mssprxy.dll 2019-03-19 07:44.11 147,456 del
Running Processes\RuntimeBroker.exe -Embedding\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\RuntimeBroker.exe -Embedding\ mod
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcp47mrm.dll 2019-03-19 07:44.15 186,672 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\coremessaging.dll 2019-03-19 07:44.30 859,632 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\coreuicomponents.dll 2019-03-19 07:44.09 3,323,336 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\inputhost.dll 2019-03-19 07:44.12 1,052,096 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\languageoverlayutil.dll 2019-03-19 07:43.45 170,656 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\mrmcorer.dll 2019-03-19 07:44.15 1,120,976 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\shellcommoncommonproxystub.dll 2019-03-19 07:43.57 649,728 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\staterepository.core.dll 2019-03-19 07:44.15 716,520 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\textinputframework.dll 2019-03-19 07:44.11 642,216 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\tiledatarepository.dll 2019-03-19 07:44.12 622,592 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.staterepositoryps.dll 2019-03-19 07:44.15 1,274,336 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.ui.dll 2019-03-19 07:44.00 1,383,648 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wtsapi32.dll 2019-03-19 07:44.33 64,792 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ntmarta.dll 2019-03-19 07:44.35 181,856 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.staterepository.dll 2019-03-19 07:44.15 5,244,200 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\wintypes.dll 2019-03-19 07:44.33 1,393,960 del
Running Processes\RuntimeBroker.exe -Embedding\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\RuntimeBroker.exe -Embedding\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\RuntimeBroker.exe -Embedding\ mod
Internet Explorer 11.0.18362.175 Microsoft Corporation c:\windows\system32\urlmon.dll 2019-06-12 04:33.44 1,853,440 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcp47mrm.dll 2019-03-19 07:44.15 186,672 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cldapi.dll 2019-03-19 07:44.28 105,984 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cryptbase.dll 2019-03-19 07:44.36 33,848 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cscapi.dll 2019-03-19 07:45.02 49,664 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\d3d11.dll 2019-03-19 07:44.11 2,466,296 del
Microsoft® Windows® Operating System 10.0.18362.145 Microsoft Corporation c:\windows\system32\dxgi.dll 2019-06-12 04:33.38 939,504 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\linkinfo.dll 2019-03-19 07:44.30 30,720 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\lockcontroller.dll 2019-03-19 07:44.52 694,784 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\mrmcorer.dll 2019-03-19 07:44.15 1,120,976 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\srvcli.dll 2019-03-19 07:44.35 112,088 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\staterepository.core.dll 2019-03-19 07:44.15 716,520 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\winbrand.dll 2019-03-19 07:44.30 192,160 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wincorlib.dll 2019-03-19 07:44.33 435,200 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.applicationmodel.lockscreen.dll 2019-03-19 07:44.52 500,224 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.staterepositorycore.dll 2019-03-19 07:44.15 45,568 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.storage.search.dll 2019-03-19 07:44.04 748,544 add
Windows® Search 7.0.18362.1 Microsoft Corporation c:\windows\system32\structuredquery.dll 2019-03-19 07:44.15 676,840 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\appresolver.dll 2019-03-19 07:44.21 558,344 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\appxdeploymentclient.dll 2019-06-12 04:33.39 909,736 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\authext.dll 2019-03-19 07:45.05 87,040 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dwmapi.dll 2019-03-19 07:44.30 162,392 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\edputil.dll 2019-03-19 07:44.47 119,808 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\fltlib.dll 2019-03-19 07:44.36 32,520 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\lockappbroker.dll 2019-03-19 07:44.52 439,296 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\msctf.dll 2019-03-19 07:44.33 1,263,096 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\networkstatus.dll 2019-03-19 07:44.58 126,464 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ntshrui.dll 2019-03-19 07:44.30 497,664 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shutdownux.dll 2019-03-19 07:44.46 304,128 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\slc.dll 2019-03-19 07:44.32 140,800 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\sppc.dll 2019-03-19 07:44.32 136,192 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.applicationmodel.dll 2019-03-19 07:44.03 902,320 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.ui.immersive.dll 2019-03-19 07:44.50 1,097,216 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\wintypes.dll 2019-03-19 07:44.33 1,393,960 del
Running Processes\RuntimeBroker.exe -Embedding\Opened Handles\ mod
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\AuthExt.dll.mui 2023-06-12 02:28.22 13,192 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\propsys.dll.mui 2023-06-12 02:28.24 94,112 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\ShutdownUX.dll.mui 2023-06-12 02:28.24 20,376 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\windows.storage.dll.mui 2023-06-12 02:28.24 40,864 add
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
File C:\Windows\System32\ru-RU\combase.dll.mui 2019-03-19 14:34.30 40,960 del
File C:\Windows\System32\ru-RU\KernelBase.dll.mui 2019-03-19 14:34.31 1,342,464 del
File C:\Windows\SystemResources\imageres.dll.mun 2019-03-19 07:43.55 22,571,008 del
Key HKLM\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2292890337-69778762-837601055-1001\{889AD75D-51FE-4897-A351-D71DD171583D} add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2112AB0A-C86A-4ffe-A368-0DE96E47012E}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2400183A-6185-49FB-A2D8-4A392A602BA3}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{24D89E24-2F19-4534-9DDE-6A6671FBB8FE}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2B20DF75-1EDA-4039-8097-38798227D5B7}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{339719B5-8C47-4894-94C2-D8F77ADD44A6}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{33E28130-4E1E-4676-835A-98395C3BC3BB}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{374DE290-123F-4565-9164-39C4925E467B}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{491E922F-5643-4af4-A7EB-4E7A138D8174}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{4BD8D571-6D19-48D3-BE97-422220080E43}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52528A6B-B9E3-4add-B60D-588C2DBA842D}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{56784854-C6CB-462B-8169-88E350ACB882}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{767E6811-49CB-4273-87C2-20F355E1085B}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7b0db17d-9cd2-4a93-9733-46cc89022e7c}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9B74B6A3-0DFD-4f11-9E78-5F7800F2E772}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A302545D-DEFF-464b-ABE8-61C8648D939B}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A990AE9F-A03B-4e80-94BC-9912D7504104}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C3F2459E-80D6-45DC-BFEF-1F769F2BE730}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{E25B5812-BE88-4bd9-94B0-29233477B6C3}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f3ce0f7c-4901-4acc-8648-d5d44b04ef8f}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SyncRootManager add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap add
Key HKU del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows NT\CurrentVersion add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap add
Running Processes\RuntimeBroker.exe -Embedding\ mod
Internet Explorer 11.0.18362.175 Microsoft Corporation c:\windows\system32\urlmon.dll 2019-06-12 04:33.44 1,853,440 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcp47mrm.dll 2019-03-19 07:44.15 186,672 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cldapi.dll 2019-03-19 07:44.28 105,984 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cryptbase.dll 2019-03-19 07:44.36 33,848 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cscapi.dll 2019-03-19 07:45.02 49,664 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\d3d11.dll 2019-03-19 07:44.11 2,466,296 add
Microsoft® Windows® Operating System 10.0.18362.145 Microsoft Corporation c:\windows\system32\dxgi.dll 2019-06-12 04:33.38 939,504 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\linkinfo.dll 2019-03-19 07:44.30 30,720 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\lockcontroller.dll 2019-03-19 07:44.52 694,784 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\mrmcorer.dll 2019-03-19 07:44.15 1,120,976 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\shellcommoncommonproxystub.dll 2019-03-19 07:43.57 649,728 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\srvcli.dll 2019-03-19 07:44.35 112,088 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\staterepository.core.dll 2019-03-19 07:44.15 716,520 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\winbrand.dll 2019-03-19 07:44.30 192,160 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wincorlib.dll 2019-03-19 07:44.33 435,200 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.applicationmodel.lockscreen.dll 2019-03-19 07:44.52 500,224 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.staterepositorycore.dll 2019-03-19 07:44.15 45,568 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.storage.search.dll 2019-03-19 07:44.04 748,544 del
Windows® Search 7.0.18362.1 Microsoft Corporation c:\windows\system32\structuredquery.dll 2019-03-19 07:44.15 676,840 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\appresolver.dll 2019-03-19 07:44.21 558,344 del
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\appxdeploymentclient.dll 2019-06-12 04:33.39 909,736 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\authext.dll 2019-03-19 07:45.05 87,040 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dwmapi.dll 2019-03-19 07:44.30 162,392 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\edputil.dll 2019-03-19 07:44.47 119,808 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\fltlib.dll 2019-03-19 07:44.36 32,520 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\lockappbroker.dll 2019-03-19 07:44.52 439,296 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\msctf.dll 2019-03-19 07:44.33 1,263,096 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\networkstatus.dll 2019-03-19 07:44.58 126,464 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ntshrui.dll 2019-03-19 07:44.30 497,664 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shutdownux.dll 2019-03-19 07:44.46 304,128 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\slc.dll 2019-03-19 07:44.32 140,800 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\sppc.dll 2019-03-19 07:44.32 136,192 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.applicationmodel.dll 2019-03-19 07:44.03 902,320 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.ui.immersive.dll 2019-03-19 07:44.50 1,097,216 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\wintypes.dll 2019-03-19 07:44.33 1,393,960 add
Running Processes\RuntimeBroker.exe -Embedding\Opened Handles\ mod
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\AuthExt.dll.mui 2023-06-12 02:28.22 13,192 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\propsys.dll.mui 2023-06-12 02:28.24 94,112 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\ShutdownUX.dll.mui 2023-06-12 02:28.24 20,376 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\windows.storage.dll.mui 2023-06-12 02:28.24 40,864 del
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
File C:\Windows\System32\ru-RU\combase.dll.mui 2019-03-19 14:34.30 40,960 add
File C:\Windows\System32\ru-RU\KernelBase.dll.mui 2019-03-19 14:34.31 1,342,464 add
File C:\Windows\SystemResources\imageres.dll.mun 2019-03-19 07:43.55 22,571,008 add
Key HKLM\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2292890337-69778762-837601055-1001\{889AD75D-51FE-4897-A351-D71DD171583D} del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2112AB0A-C86A-4ffe-A368-0DE96E47012E}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2400183A-6185-49FB-A2D8-4A392A602BA3}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{24D89E24-2F19-4534-9DDE-6A6671FBB8FE}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2B20DF75-1EDA-4039-8097-38798227D5B7}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{339719B5-8C47-4894-94C2-D8F77ADD44A6}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{33E28130-4E1E-4676-835A-98395C3BC3BB}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{374DE290-123F-4565-9164-39C4925E467B}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{491E922F-5643-4af4-A7EB-4E7A138D8174}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{4BD8D571-6D19-48D3-BE97-422220080E43}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52528A6B-B9E3-4add-B60D-588C2DBA842D}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{56784854-C6CB-462B-8169-88E350ACB882}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{767E6811-49CB-4273-87C2-20F355E1085B}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7b0db17d-9cd2-4a93-9733-46cc89022e7c}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9B74B6A3-0DFD-4f11-9E78-5F7800F2E772}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A302545D-DEFF-464b-ABE8-61C8648D939B}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A990AE9F-A03B-4e80-94BC-9912D7504104}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C3F2459E-80D6-45DC-BFEF-1F769F2BE730}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{E25B5812-BE88-4bd9-94B0-29233477B6C3}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f3ce0f7c-4901-4acc-8648-d5d44b04ef8f}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SyncRootManager del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap del
Key HKU add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows NT\CurrentVersion del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts del
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap del
Running Processes\SearchFilterHost.exe 0 776 780 788 8192 784 \ mod
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\coml2.dll 2019-03-19 07:44.15 477,240 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.staterepositoryps.dll 2019-03-19 07:44.15 1,274,336 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcrypt.dll 2019-03-19 07:44.33 144,144 add
Операционная система Microsoft® Windows® 2008.0.18362.1 Microsoft Corporation c:\windows\system32\offfilt.dll 2019-03-19 07:45.02 270,336 add
Операционная система Microsoft® Windows® 10.0.18362.113 Microsoft Corporation c:\windows\system32\ole32.dll 2019-06-12 04:33.40 1,395,600 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shcore.dll 2019-03-19 07:44.21 684,352 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\sxs.dll 2019-03-19 07:44.33 637,056 add
Служба Windows® Search 7.0.18362.1 Microsoft Corporation c:\windows\system32\propsys.dll 2019-03-19 07:44.15 977,680 add
Running Processes\SearchFilterHost.exe 0 776 780 788 8192 784 \Opened Handles\ mod
File \Device\KsecDD add
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
File C:\Windows\System32\ru-RU\combase.dll.mui 2019-03-19 14:34.30 40,960 add
File C:\Windows\System32\ru-RU\KernelBase.dll.mui 2019-03-19 14:34.31 1,342,464 add
Key HKLM\SOFTWARE\Classes\PackagedCom add
Key HKLM\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Extensions add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\Server add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\CodePage add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids add
Key HKU\.DEFAULT\Control Panel\International add
Running Processes\SearchIndexer.exe /Embedding\ mod
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcp47mrm.dll 2019-03-19 07:44.15 186,672 add
Microsoft® Windows® Operating System 10.0.18362.86 Microsoft Corporation c:\windows\system32\windows.globalization.dll 2019-06-12 04:33.37 1,784,832 add
Операционная система Microsoft® Windows® 10.0.18362.113 Microsoft Corporation c:\windows\system32\ole32.dll 2019-06-12 04:33.40 1,395,600 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\query.dll 2019-03-19 07:44.11 105,472 add
Running Processes\SearchIndexer.exe /Embedding\Opened Handles\ mod
File C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.6.Crwl 2026-10-07 00:06.27 0 old
File C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.6.Crwl 2026-10-07 00:06.27 2 new
File C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.6.gthr 2026-10-07 00:06.27 0 old
File C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.6.gthr 2026-10-07 00:07.36 486 new
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
File C:\Windows\System32\ru-RU\shell32.dll.mui 2019-03-19 14:34.32 478,720 add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag add
Key HKU add
Running Processes\SearchProtocolHost.exe Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" \ del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\authz.dll 2019-03-19 07:44.35 284,160 del
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\bcryptprimitives.dll 2019-06-12 04:33.43 529,072 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cfgmgr32.dll 2019-03-19 07:44.35 293,344 del
Microsoft® Windows® Operating System 2001.12.10941.16384 Microsoft Corporation c:\windows\system32\clbcatq.dll 2019-03-19 07:44.30 643,752 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cldapi.dll 2019-03-19 07:44.28 105,984 del
Microsoft® Windows® Operating System 10.0.18362.113 Microsoft Corporation c:\windows\system32\cryptdll.dll 2019-06-12 04:33.42 66,360 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cryptsp.dll 2019-03-19 07:44.33 80,112 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\gdi32.dll 2019-03-19 07:44.06 147,912 del
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\gdi32full.dll 2019-06-12 04:33.43 1,647,584 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\imm32.dll 2019-03-19 07:44.38 176,360 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\kernel.appcore.dll 2019-03-19 07:44.15 59,088 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\linkinfo.dll 2019-03-19 07:44.30 30,720 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msidle.dll 2019-03-19 07:44.53 11,776 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msvcp_win.dll 2019-03-19 07:44.33 639,632 del
Microsoft® Windows® Operating System 7.0.18362.1 Microsoft Corporation c:\windows\system32\msvcrt.dll 2019-03-19 07:44.35 638,072 del
Microsoft® Windows® Operating System 10.0.18362.86 Microsoft Corporation c:\windows\system32\oleaut32.dll 2019-06-12 04:33.42 797,112 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\profapi.dll 2019-03-19 07:44.36 110,280 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\sechost.dll 2019-03-19 07:44.36 606,104 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\sspicli.dll 2019-03-19 07:44.36 179,944 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ucrtbase.dll 2019-03-19 07:44.33 1,020,776 del
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\win32u.dll 2019-06-12 04:33.39 127,064 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.staterepositoryps.dll 2019-03-19 07:44.15 1,274,336 del
umpdc.dll c:\windows\system32\umpdc.dll 2019-03-19 07:43.49 54,960 del
Windows® Search 7.0.18362.1 Microsoft Corporation c:\windows\system32\mssprxy.dll 2019-03-19 07:44.11 147,456 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\advapi32.dll 2019-03-19 07:43.54 655,144 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcrypt.dll 2019-03-19 07:44.33 144,144 del
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\combase.dll 2019-06-12 04:33.42 3,373,256 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\edputil.dll 2019-03-19 07:44.47 119,808 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\fltlib.dll 2019-03-19 07:44.36 32,520 del
Операционная система Microsoft® Windows® 10.0.18362.86 Microsoft Corporation c:\windows\system32\kernel32.dll 2019-06-12 04:33.37 722,072 del
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\kernelbase.dll 2019-06-12 04:33.43 2,763,312 del
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\ntdll.dll 2019-06-12 04:33.42 1,999,440 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ntmarta.dll 2019-03-19 07:44.35 181,856 del
Операционная система Microsoft® Windows® 10.0.18362.113 Microsoft Corporation c:\windows\system32\ole32.dll 2019-06-12 04:33.40 1,395,600 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\powrprof.dll 2019-03-19 07:44.35 291,336 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\rpcrt4.dll 2019-03-19 07:44.36 1,171,192 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shcore.dll 2019-03-19 07:44.21 684,352 del
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\shell32.dll 2019-06-12 04:33.41 7,241,800 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shlwapi.dll 2019-03-19 07:45.05 329,200 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\user32.dll 2019-03-19 07:44.15 1,654,544 del
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\windows.storage.dll 2019-06-12 04:33.39 7,887,656 del
Служба Windows® Search 7.0.18362.1 Microsoft Corporation c:\windows\system32\mssph.dll 2019-03-19 07:44.11 204,800 del
Служба Windows® Search 7.0.18362.1 Microsoft Corporation c:\windows\system32\propsys.dll 2019-03-19 07:44.15 977,680 del
Служба Windows® Search 7.0.18362.1 Microsoft Corporation c:\windows\system32\tquery.dll 2019-03-19 07:44.11 3,263,488 del
Running Processes\SearchProtocolHost.exe Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" \Opened Handles\ del
Directory \BaseNamedObjects del
File \Device\CNG del
File \Device\DeviceApi del
File \Device\KsecDD del
Directory \KnownDlls del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\propsys.dll.mui 2023-06-12 02:28.24 94,112 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\windows.storage.dll.mui 2023-06-12 02:28.24 40,864 del
File C:\Windows\Registration\R000000000006.clb 2023-06-12 00:13.07 27,356 del
Directory C:\Windows\System32 del
File C:\Windows\System32\ru-RU\shell32.dll.mui 2019-03-19 14:34.32 478,720 del
Key HKLM del
Key HKLM\SOFTWARE\Classes del
Key HKLM\SOFTWARE\Classes\PackagedCom del
Key HKLM\SOFTWARE\Microsoft\Ole del
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options del
Key HKLM\SOFTWARE\Microsoft\Windows Search del
Key HKLM\SOFTWARE\Microsoft\Windows Search\Gathering Manager del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SyncRootManager del
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime del
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId del
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\Server del
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids del
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions del
Key HKLM\SYSTEM\ControlSet001\Control\Session Manager del
Key HKU\.DEFAULT del
Key HKU\.DEFAULT\Control Panel\International del
Key HKU\.DEFAULT\Software\Classes del
Key HKU\.DEFAULT\Software\Classes\Local Settings del
Key HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft del
Key HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer del
Key HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts del
Running Processes\SearchProtocolHost.exe Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" \ add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\authz.dll 2019-03-19 07:44.35 284,160 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\bcryptprimitives.dll 2019-06-12 04:33.43 529,072 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cfgmgr32.dll 2019-03-19 07:44.35 293,344 add
Microsoft® Windows® Operating System 2001.12.10941.16384 Microsoft Corporation c:\windows\system32\clbcatq.dll 2019-03-19 07:44.30 643,752 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cldapi.dll 2019-03-19 07:44.28 105,984 add
Microsoft® Windows® Operating System 10.0.18362.113 Microsoft Corporation c:\windows\system32\cryptdll.dll 2019-06-12 04:33.42 66,360 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cryptsp.dll 2019-03-19 07:44.33 80,112 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\gdi32.dll 2019-03-19 07:44.06 147,912 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\gdi32full.dll 2019-06-12 04:33.43 1,647,584 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\imm32.dll 2019-03-19 07:44.38 176,360 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\kernel.appcore.dll 2019-03-19 07:44.15 59,088 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msidle.dll 2019-03-19 07:44.53 11,776 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msvcp_win.dll 2019-03-19 07:44.33 639,632 add
Microsoft® Windows® Operating System 7.0.18362.1 Microsoft Corporation c:\windows\system32\msvcrt.dll 2019-03-19 07:44.35 638,072 add
Microsoft® Windows® Operating System 10.0.18362.86 Microsoft Corporation c:\windows\system32\oleaut32.dll 2019-06-12 04:33.42 797,112 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\profapi.dll 2019-03-19 07:44.36 110,280 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\sechost.dll 2019-03-19 07:44.36 606,104 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\sspicli.dll 2019-03-19 07:44.36 179,944 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ucrtbase.dll 2019-03-19 07:44.33 1,020,776 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\win32u.dll 2019-06-12 04:33.39 127,064 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.staterepositoryps.dll 2019-03-19 07:44.15 1,274,336 add
umpdc.dll c:\windows\system32\umpdc.dll 2019-03-19 07:43.49 54,960 add
Windows® Search 7.0.18362.1 Microsoft Corporation c:\windows\system32\mssprxy.dll 2019-03-19 07:44.11 147,456 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\advapi32.dll 2019-03-19 07:43.54 655,144 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\apphelp.dll 2019-03-19 07:44.28 564,736 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcrypt.dll 2019-03-19 07:44.33 144,144 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\combase.dll 2019-06-12 04:33.42 3,373,256 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\edputil.dll 2019-03-19 07:44.47 119,808 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\fltlib.dll 2019-03-19 07:44.36 32,520 add
Операционная система Microsoft® Windows® 10.0.18362.86 Microsoft Corporation c:\windows\system32\kernel32.dll 2019-06-12 04:33.37 722,072 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\kernelbase.dll 2019-06-12 04:33.43 2,763,312 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\ntdll.dll 2019-06-12 04:33.42 1,999,440 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ntmarta.dll 2019-03-19 07:44.35 181,856 add
Операционная система Microsoft® Windows® 10.0.18362.113 Microsoft Corporation c:\windows\system32\ole32.dll 2019-06-12 04:33.40 1,395,600 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\powrprof.dll 2019-03-19 07:44.35 291,336 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\rpcrt4.dll 2019-03-19 07:44.36 1,171,192 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shcore.dll 2019-03-19 07:44.21 684,352 add
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\shell32.dll 2019-06-12 04:33.41 7,241,800 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shlwapi.dll 2019-03-19 07:45.05 329,200 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\user32.dll 2019-03-19 07:44.15 1,654,544 add
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\windows.storage.dll 2019-06-12 04:33.39 7,887,656 add
Служба Windows® Search 7.0.18362.1 Microsoft Corporation c:\windows\system32\mssph.dll 2019-03-19 07:44.11 204,800 add
Служба Windows® Search 7.0.18362.1 Microsoft Corporation c:\windows\system32\propsys.dll 2019-03-19 07:44.15 977,680 add
Служба Windows® Search 7.0.18362.1 Microsoft Corporation c:\windows\system32\tquery.dll 2019-03-19 07:44.11 3,263,488 add
Running Processes\SearchProtocolHost.exe Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" \Opened Handles\ add
Directory \BaseNamedObjects add
File \Device\CNG add
File \Device\DeviceApi add
File \Device\KsecDD add
Directory \KnownDlls add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\propsys.dll.mui 2023-06-12 02:28.24 94,112 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\tquery.dll.mui 2023-06-12 02:28.24 201,104 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\windows.storage.dll.mui 2023-06-12 02:28.24 40,864 add
File C:\Windows\Registration\R000000000006.clb 2023-06-12 00:13.07 27,356 add
Directory C:\Windows\System32 add
File C:\Windows\System32\ru-RU\KernelBase.dll.mui 2019-03-19 14:34.31 1,342,464 add
File C:\Windows\System32\ru-RU\shell32.dll.mui 2019-03-19 14:34.32 478,720 add
Key HKLM add
Key HKLM\SOFTWARE\Classes add
Key HKLM\SOFTWARE\Classes\PackagedCom add
Key HKLM\SOFTWARE\Microsoft\Ole add
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options add
Key HKLM\SOFTWARE\Microsoft\Windows Search add
Key HKLM\SOFTWARE\Microsoft\Windows Search\Gathering Manager add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SyncRootManager add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\Server add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions add
Key HKLM\SYSTEM\ControlSet001\Control\Session Manager add
Key HKU\.DEFAULT add
Key HKU\.DEFAULT\Control Panel\International add
Key HKU\.DEFAULT\Software\Classes add
Key HKU\.DEFAULT\Software\Classes\Local Settings add
Key HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft add
Key HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer add
Key HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts add
Running Processes\SearchProtocolHost.exe Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-2292890337-69778762-837601055-10013_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-2292890337-69778762-837601055-10013 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"\ add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\bcryptprimitives.dll 2019-06-12 04:33.43 529,072 add
Microsoft® Windows® Operating System 2001.12.10941.16384 Microsoft Corporation c:\windows\system32\clbcatq.dll 2019-03-19 07:44.30 643,752 add
Microsoft® Windows® Operating System 10.0.18362.113 Microsoft Corporation c:\windows\system32\cryptdll.dll 2019-06-12 04:33.42 66,360 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\gdi32.dll 2019-03-19 07:44.06 147,912 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\gdi32full.dll 2019-06-12 04:33.43 1,647,584 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\imm32.dll 2019-03-19 07:44.38 176,360 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\kernel.appcore.dll 2019-03-19 07:44.15 59,088 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msidle.dll 2019-03-19 07:44.53 11,776 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msvcp_win.dll 2019-03-19 07:44.33 639,632 add
Microsoft® Windows® Operating System 7.0.18362.1 Microsoft Corporation c:\windows\system32\msvcrt.dll 2019-03-19 07:44.35 638,072 add
Microsoft® Windows® Operating System 10.0.18362.86 Microsoft Corporation c:\windows\system32\oleaut32.dll 2019-06-12 04:33.42 797,112 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\profapi.dll 2019-03-19 07:44.36 110,280 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\sechost.dll 2019-03-19 07:44.36 606,104 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ucrtbase.dll 2019-03-19 07:44.33 1,020,776 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\win32u.dll 2019-06-12 04:33.39 127,064 add
umpdc.dll c:\windows\system32\umpdc.dll 2019-03-19 07:43.49 54,960 add
Windows® Search 7.0.18362.1 Microsoft Corporation c:\windows\system32\mssprxy.dll 2019-03-19 07:44.11 147,456 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\advapi32.dll 2019-03-19 07:43.54 655,144 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\combase.dll 2019-06-12 04:33.42 3,373,256 add
Операционная система Microsoft® Windows® 10.0.18362.86 Microsoft Corporation c:\windows\system32\kernel32.dll 2019-06-12 04:33.37 722,072 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\kernelbase.dll 2019-06-12 04:33.43 2,763,312 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\ntdll.dll 2019-06-12 04:33.42 1,999,440 add
Операционная система Microsoft® Windows® 10.0.18362.113 Microsoft Corporation c:\windows\system32\ole32.dll 2019-06-12 04:33.40 1,395,600 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\powrprof.dll 2019-03-19 07:44.35 291,336 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\rpcrt4.dll 2019-03-19 07:44.36 1,171,192 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shcore.dll 2019-03-19 07:44.21 684,352 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shlwapi.dll 2019-03-19 07:45.05 329,200 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\user32.dll 2019-03-19 07:44.15 1,654,544 add
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\windows.storage.dll 2019-06-12 04:33.39 7,887,656 add
Служба Windows® Search 7.0.18362.1 Microsoft Corporation c:\windows\system32\mssph.dll 2019-03-19 07:44.11 204,800 add
Служба Windows® Search 7.0.18362.1 Microsoft Corporation c:\windows\system32\tquery.dll 2019-03-19 07:44.11 3,263,488 add
Running Processes\SearchProtocolHost.exe Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-2292890337-69778762-837601055-10013_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-2292890337-69778762-837601055-10013 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"\Opened Handles\ add
File \Device\CNG add
Directory \KnownDlls add
Directory \Sessions\1\BaseNamedObjects add
File C:\Windows\Registration\R000000000006.clb 2023-06-12 00:13.07 27,356 add
Directory C:\Windows\System32 add
Key HKLM add
Key HKLM\SOFTWARE\Classes\PackagedCom add
Key HKLM\SOFTWARE\Microsoft\Ole add
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options add
Key HKLM\SOFTWARE\Microsoft\Windows Search add
Key HKLM\SOFTWARE\Microsoft\Windows Search\Gathering Manager add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions add
Key HKLM\SYSTEM\ControlSet001\Control\Session Manager add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft add
Running Processes\SearchUI.exe -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca\Opened Handles\ mod
File \Device\Afd del
Running Processes\SearchUI.exe -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca\Opened Ports\ del
TCP 10.0.2.15 49687 2.16.106.196 443 CLOSE_WAIT del
Running Processes\sihost.exe\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\smartscreen.exe -Embedding\Opened Handles\ mod
File \Device\Afd del
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\smartscreen.exe -Embedding\Opened Ports\ del
TCP 10.0.2.15 49690 20.56.187.20 443 ESTABLISHED del
Running Processes\spoolsv.exe\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\StartMenuExperienceHost.exe -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca\ mod
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\execmodelproxy.dll 2019-03-19 07:44.03 83,456 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.cloudstore.schema.shell.dll 2019-03-19 07:43.57 1,113,088 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.shell.servicehostbuilder.dll 2019-03-19 07:44.12 96,768 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.web.dll 2019-03-19 07:44.01 758,784 del
Running Processes\svchost.exe -k appmodel -p -s camsvc\ mod
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\capabilityaccesshandlers.dll 2019-03-19 07:44.06 65,024 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cfgmgr32.dll 2019-03-19 07:44.35 293,344 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\devobj.dll 2019-03-19 07:44.35 158,592 add
umpdc.dll c:\windows\system32\umpdc.dll 2019-03-19 07:43.49 54,960 add
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\audioses.dll 2019-06-12 04:33.35 1,413,704 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\mmdevapi.dll 2019-03-19 07:43.47 476,936 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\powrprof.dll 2019-03-19 07:44.35 291,336 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shcore.dll 2019-03-19 07:44.21 684,352 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\wintypes.dll 2019-03-19 07:44.33 1,393,960 add
Running Processes\svchost.exe -k appmodel -p -s camsvc\Opened Handles\ mod
File \Device\DeviceApi add
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k appmodel -p -s StateRepository\Opened Handles\ mod
File C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd 2026-10-06 22:21.58 6,291,456 del
File C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-shm 2026-10-07 00:06.25 32,768 del
File C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-wal 2026-10-07 00:06.26 12,392 del
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k DcomLaunch -p\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k DcomLaunch -p -s LSM\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k DcomLaunch -p -s PlugPlay\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalService -p\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalService -p -s BthAvctpSvc\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalService -p -s CDPSvc\ mod
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\bluetoothapis.dll 2019-03-19 07:44.16 197,632 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\devobj.dll 2019-03-19 07:44.35 158,592 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\netprofm.dll 2019-03-19 07:45.00 226,816 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\usermgrcli.dll 2019-03-19 07:44.38 75,920 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.networking.hostname.dll 2019-03-19 07:44.00 210,432 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dnsapi.dll 2019-03-19 07:44.33 818,888 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\sxs.dll 2019-03-19 07:44.33 637,056 add
Running Processes\svchost.exe -k LocalService -p -s CDPSvc\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Key HKLM\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces add
Key HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces add
Running Processes\svchost.exe -k LocalService -p -s DispBrokerDesktopSvc\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalService -p -s EventSystem\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalService -p -s FontCache\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalService -p -s LicenseManager\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalService -p -s netprofm\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalService -p -s nsi\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalService -p -s SstpSvc\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalService -p -s WdiServiceHost\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalServiceNetworkRestricted\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalServiceNetworkRestricted -p\ mod
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\audiosrvpolicymanager.dll 2019-03-19 07:43.47 333,336 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cmintegrator.dll 2019-03-19 07:44.15 44,544 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\coreaudiopolicymanagerext.dll 2019-03-19 07:43.47 14,848 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\devobj.dll 2019-03-19 07:44.35 158,592 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\fwbase.dll 2019-03-19 07:44.15 162,304 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\mobilenetworking.dll 2019-03-19 07:44.12 21,504 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\nlaapi.dll 2019-03-19 07:45.00 93,184 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\npmproxy.dll 2019-03-19 07:45.00 45,056 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\nsi.dll 2019-03-19 07:44.36 25,000 add
Microsoft® Windows® Operating System 10.0.18362.86 Microsoft Corporation c:\windows\system32\oleaut32.dll 2019-06-12 04:33.42 797,112 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\profapi.dll 2019-03-19 07:44.36 110,280 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\rmclient.dll 2019-03-19 07:44.15 157,536 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wcmcsp.dll 2019-03-19 07:43.54 236,544 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\winnsi.dll 2019-03-19 07:44.36 34,808 add
Microsoft® Windows® Operating System 10.0.18362.53 Microsoft Corporation c:\windows\system32\winsta.dll 2019-06-12 04:33.42 358,944 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wmiclnt.dll 2019-03-19 07:43.45 46,592 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wtsapi32.dll 2019-03-19 07:44.33 64,792 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\xmllite.dll 2019-03-19 07:44.38 211,216 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\advapi32.dll 2019-03-19 07:43.54 655,144 del
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\audiosrv.dll 2019-06-12 04:33.35 1,944,064 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dnsapi.dll 2019-03-19 07:44.33 818,888 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\firewallapi.dll 2019-03-19 07:44.15 551,936 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\gpapi.dll 2019-03-19 07:44.48 129,808 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\iphlpapi.dll 2019-03-19 07:44.33 229,528 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\mmdevapi.dll 2019-03-19 07:43.47 476,936 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shcore.dll 2019-03-19 07:44.21 684,352 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\twinapi.appcore.dll 2019-03-19 07:44.04 2,473,984 del
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\userenv.dll 2019-06-12 04:33.42 139,472 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\wcmsvc.dll 2019-03-19 07:43.54 1,037,312 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\winhttp.dll 2019-03-19 07:44.35 980,248 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ws2_32.dll 2019-03-19 07:44.36 443,424 add
Running Processes\svchost.exe -k LocalServiceNetworkRestricted -p\Opened Handles\ mod
Directory \BaseNamedObjects del
File \Device\CNG del
File \Device\DeviceApi del
Directory \KnownDlls del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\svchost.exe.mui 2023-06-12 02:28.24 12,680 del
File C:\Windows\Registration\R000000000006.clb 2023-06-12 00:13.07 27,356 del
Directory C:\Windows\System32 del
Key HKLM del
Key HKLM\SOFTWARE\Classes del
Key HKLM\SOFTWARE\Microsoft\Ole del
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options del
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\HoloSI\Audio del
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions del
Key HKLM\SYSTEM\ControlSet001\Control\Session Manager del
Key HKU\S-1-5-19\Software\Classes del
Key HKU\S-1-5-19\Software\Classes\Local Settings del
Key HKU\S-1-5-19\Software\Classes\Local Settings\Software\Microsoft del
Directory \BaseNamedObjects add
File \Device\CNG add
File \Device\DeviceApi add
File \Device\Nsi add
File \Device\WMIDataDevice add
Directory \KnownDlls add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\svchost.exe.mui 2023-06-12 02:28.24 12,680 add
File C:\Windows\Registration\R000000000006.clb 2023-06-12 00:13.07 27,356 add
Directory C:\Windows\System32 add
File C:\Windows\System32\ru-RU\KernelBase.dll.mui 2019-03-19 14:34.31 1,342,464 add
Key HKLM add
Key HKLM\SOFTWARE\Classes add
Key HKLM\SOFTWARE\Microsoft\Ole add
Key HKLM\SOFTWARE\Microsoft\WcmSvc add
Key HKLM\SOFTWARE\Microsoft\WcmSvc\CellularFailover add
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options add
Key HKLM\SOFTWARE\Policies\Microsoft\Windows\WcmSvc add
Key HKLM\SOFTWARE\Policies\Microsoft\Windows\WcmSvc\GroupPolicy add
Key HKLM\SOFTWARE\Policies\Microsoft\Windows\WcmSvc\Local add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions add
Key HKLM\SYSTEM\ControlSet001\Control\Session Manager add
Key HKLM\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces add
Key HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces add
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 add
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 add
Key HKU\S-1-5-19\Software\Classes add
Key HKU\S-1-5-19\Software\Classes\Local Settings add
Key HKU\S-1-5-19\Software\Classes\Local Settings\Software\Microsoft add
Running Processes\svchost.exe -k LocalServiceNetworkRestricted -p\ mod
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\audiosrvpolicymanager.dll 2019-03-19 07:43.47 333,336 add
Microsoft® Windows® Operating System 2001.12.10941.16384 Microsoft Corporation c:\windows\system32\clbcatq.dll 2019-03-19 07:44.30 643,752 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\coreaudiopolicymanagerext.dll 2019-03-19 07:43.47 14,848 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\devobj.dll 2019-03-19 07:44.35 158,592 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\mobilenetworking.dll 2019-03-19 07:44.12 21,504 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\nsi.dll 2019-03-19 07:44.36 25,000 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\profapi.dll 2019-03-19 07:44.36 110,280 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\rmclient.dll 2019-03-19 07:44.15 157,536 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\systemeventsbrokerclient.dll 2019-03-19 07:44.01 30,208 del
Microsoft® Windows® Operating System 10.0.18362.53 Microsoft Corporation c:\windows\system32\winsta.dll 2019-06-12 04:33.42 358,944 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wmiclnt.dll 2019-03-19 07:43.45 46,592 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wtsapi32.dll 2019-03-19 07:44.33 64,792 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\xmllite.dll 2019-03-19 07:44.38 211,216 add
umpdc.dll c:\windows\system32\umpdc.dll 2019-03-19 07:43.49 54,960 add
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\audiosrv.dll 2019-06-12 04:33.35 1,944,064 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dusmsvc.dll 2019-03-19 07:45.32 358,912 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\gpapi.dll 2019-03-19 07:44.48 129,808 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\iphlpapi.dll 2019-03-19 07:44.33 229,528 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\mmdevapi.dll 2019-03-19 07:43.47 476,936 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\powrprof.dll 2019-03-19 07:44.35 291,336 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shcore.dll 2019-03-19 07:44.21 684,352 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\twinapi.appcore.dll 2019-03-19 07:44.04 2,473,984 add
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\userenv.dll 2019-06-12 04:33.42 139,472 del
Running Processes\svchost.exe -k LocalServiceNetworkRestricted -p\Opened Handles\ mod
File \Device\Nsi del
File \Device\WMIDataDevice del
File C:\Windows\Registration\R000000000006.clb 2023-06-12 00:13.07 27,356 add
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\HoloSI\Audio add
Key HKU\S-1-5-19\Software\Classes add
Running Processes\svchost.exe -k LocalServiceNetworkRestricted -p\ mod
Microsoft® Windows® Operating System 2001.12.10941.16384 Microsoft Corporation c:\windows\system32\clbcatq.dll 2019-03-19 07:44.30 643,752 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cmintegrator.dll 2019-03-19 07:44.15 44,544 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\fwbase.dll 2019-03-19 07:44.15 162,304 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\nlaapi.dll 2019-03-19 07:45.00 93,184 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\npmproxy.dll 2019-03-19 07:45.00 45,056 del
Microsoft® Windows® Operating System 10.0.18362.86 Microsoft Corporation c:\windows\system32\oleaut32.dll 2019-06-12 04:33.42 797,112 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\systemeventsbrokerclient.dll 2019-03-19 07:44.01 30,208 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wcmcsp.dll 2019-03-19 07:43.54 236,544 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\winnsi.dll 2019-03-19 07:44.36 34,808 del
umpdc.dll c:\windows\system32\umpdc.dll 2019-03-19 07:43.49 54,960 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\advapi32.dll 2019-03-19 07:43.54 655,144 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dnsapi.dll 2019-03-19 07:44.33 818,888 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dusmsvc.dll 2019-03-19 07:45.32 358,912 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\firewallapi.dll 2019-03-19 07:44.15 551,936 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\powrprof.dll 2019-03-19 07:44.35 291,336 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\wcmsvc.dll 2019-03-19 07:43.54 1,037,312 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\winhttp.dll 2019-03-19 07:44.35 980,248 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ws2_32.dll 2019-03-19 07:44.36 443,424 del
Running Processes\svchost.exe -k LocalServiceNetworkRestricted -p\Opened Handles\ mod
Directory \BaseNamedObjects add
File \Device\CNG add
File \Device\DeviceApi add
File \Device\Nsi add
File \Device\WMIDataDevice add
Directory \KnownDlls add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\svchost.exe.mui 2023-06-12 02:28.24 12,680 add
Directory C:\Windows\System32 add
Key HKLM add
Key HKLM\SOFTWARE\Classes add
Key HKLM\SOFTWARE\Microsoft\Ole add
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions add
Key HKLM\SYSTEM\ControlSet001\Control\Session Manager add
Key HKU\S-1-5-19\Software\Classes\Local Settings add
Key HKU\S-1-5-19\Software\Classes\Local Settings\Software\Microsoft add
Directory \BaseNamedObjects del
File \Device\CNG del
File \Device\DeviceApi del
File \Device\Nsi del
File \Device\WMIDataDevice del
Directory \KnownDlls del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\svchost.exe.mui 2023-06-12 02:28.24 12,680 del
File C:\Windows\Registration\R000000000006.clb 2023-06-12 00:13.07 27,356 del
Directory C:\Windows\System32 del
File C:\Windows\System32\ru-RU\KernelBase.dll.mui 2019-03-19 14:34.31 1,342,464 del
Key HKLM del
Key HKLM\SOFTWARE\Classes del
Key HKLM\SOFTWARE\Microsoft\Ole del
Key HKLM\SOFTWARE\Microsoft\WcmSvc del
Key HKLM\SOFTWARE\Microsoft\WcmSvc\CellularFailover del
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options del
Key HKLM\SOFTWARE\Policies\Microsoft\Windows\WcmSvc del
Key HKLM\SOFTWARE\Policies\Microsoft\Windows\WcmSvc\GroupPolicy del
Key HKLM\SOFTWARE\Policies\Microsoft\Windows\WcmSvc\Local del
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids del
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions del
Key HKLM\SYSTEM\ControlSet001\Control\Session Manager del
Key HKLM\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces del
Key HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces del
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 del
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 del
Key HKU\S-1-5-19\Software\Classes del
Key HKU\S-1-5-19\Software\Classes\Local Settings del
Key HKU\S-1-5-19\Software\Classes\Local Settings\Software\Microsoft del
Running Processes\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalServiceNetworkRestricted -p -s EventLog\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
File C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx 2026-10-07 00:12.59 69,632 add
File C:\Windows\System32\winevt\Logs\Microsoft-Windows-Storsvc%4Diagnostic.evtx 2026-10-06 22:21.58 69,632 old
File C:\Windows\System32\winevt\Logs\Microsoft-Windows-Storsvc%4Diagnostic.evtx 2026-10-07 00:09.25 69,632 new
Running Processes\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhosts\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalServiceNetworkRestricted -p -s TimeBrokerSvc\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalServiceNetworkRestricted -p -s WinHttpAutoProxySvc\ mod
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\mobilenetworking.dll 2019-03-19 07:44.12 21,504 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\rmclient.dll 2019-03-19 07:44.15 157,536 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wcmapi.dll 2019-03-19 07:43.54 140,288 add
Running Processes\svchost.exe -k LocalServiceNetworkRestricted -p -s WinHttpAutoProxySvc\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalServiceNoNetwork -p\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalServiceNoNetwork -p -s DPS\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalServiceNoNetworkFirewall -p\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalSystemNetworkRestricted -p -s AudioEndpointBuilder\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService\ mod
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\eventaggregation.dll 2019-03-19 07:44.01 78,336 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\timebrokerclient.dll 2019-03-19 07:44.01 35,840 add
Running Processes\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalSystemNetworkRestricted -p -s PcaSvc\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalSystemNetworkRestricted -p -s StorSvc\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalSystemNetworkRestricted -p -s SysMain\ mod
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcrypt.dll 2019-03-19 07:44.33 144,144 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\setupapi.dll 2019-03-19 07:45.00 4,683,784 add
Running Processes\svchost.exe -k LocalSystemNetworkRestricted -p -s SysMain\Opened Handles\ mod
File \Device\KsecDD add
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalSystemNetworkRestricted -p -s TabletInputService\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalSystemNetworkRestricted -p -s TrkWks\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k LocalSystemNetworkRestricted -p -s WdiSystemHost\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k netsvcs\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k netsvcs -p\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k netsvcs -p -s Appinfo\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k netsvcs -p -s gpsvc\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k NetSvcs -p -s iphlpsvc\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k netsvcs -p -s LanmanServer\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k netsvcs -p -s ProfSvc\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k netsvcs -p -s Schedule\ mod
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\apphelp.dll 2019-03-19 07:44.28 564,736 add
Running Processes\svchost.exe -k netsvcs -p -s Schedule\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k netsvcs -p -s SENS\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k netsvcs -p -s ShellHWDetection\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k netsvcs -p -s Themes\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k netsvcs -p -s TokenBroker\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k netsvcs -p -s UserManager\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k netsvcs -p -s UsoSvc\Opened Handles\ mod
File C:\ProgramData\USOShared\Logs\UpdateSessionOrchestration.402a7fda-e777-4f34-9097-840cabfa94d3.1.etl 2026-10-07 00:08.00 0 old
File C:\ProgramData\USOShared\Logs\UpdateSessionOrchestration.402a7fda-e777-4f34-9097-840cabfa94d3.1.etl 2026-10-07 00:08.02 16,384 new
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k netsvcs -p -s Winmgmt\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
File C:\Windows\System32\wbem\Repository\INDEX.BTR 2026-10-06 22:18.54 5,046,272 old
File C:\Windows\System32\wbem\Repository\INDEX.BTR 2026-10-07 00:11.24 5,046,272 new
File C:\Windows\System32\wbem\Repository\MAPPING2.MAP 2026-10-06 02:38.09 89,660 old
File C:\Windows\System32\wbem\Repository\MAPPING2.MAP 2026-10-07 00:11.24 89,660 new
File C:\Windows\System32\wbem\Repository\OBJECTS.DATA 2026-10-06 22:18.54 27,049,984 old
File C:\Windows\System32\wbem\Repository\OBJECTS.DATA 2026-10-07 00:11.24 27,049,984 new
Key HKU\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion add
Running Processes\svchost.exe -k netsvcs -p -s wlidsvc\ del
Microsoft XML Core Services 6.30.18362.175 Microsoft Corporation c:\windows\system32\msxml6.dll 2019-06-12 04:33.38 2,449,456 del
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\bcryptprimitives.dll 2019-06-12 04:33.43 529,072 del
Microsoft® Windows® Operating System 2001.12.10941.16384 Microsoft Corporation c:\windows\system32\clbcatq.dll 2019-03-19 07:44.30 643,752 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cryptbase.dll 2019-03-19 07:44.36 33,848 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cryptnet.dll 2019-03-19 07:44.33 168,448 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cryptsp.dll 2019-03-19 07:44.33 80,112 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\dpapi.dll 2019-03-19 07:44.35 15,872 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\gdi32.dll 2019-03-19 07:44.06 147,912 del
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\gdi32full.dll 2019-06-12 04:33.43 1,647,584 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\imagehlp.dll 2019-03-19 07:44.35 108,936 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\kernel.appcore.dll 2019-03-19 07:44.15 59,088 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msasn1.dll 2019-03-19 07:44.35 63,040 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msauserext.dll 2019-03-19 07:44.52 23,040 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msvcp110_win.dll 2019-03-19 07:43.45 560,584 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msvcp_win.dll 2019-03-19 07:44.33 639,632 del
Microsoft® Windows® Operating System 7.0.18362.1 Microsoft Corporation c:\windows\system32\msvcrt.dll 2019-03-19 07:44.35 638,072 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ncryptsslp.dll 2019-03-19 07:44.35 134,280 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\netprofm.dll 2019-03-19 07:45.00 226,816 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\npmproxy.dll 2019-03-19 07:45.00 45,056 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\nsi.dll 2019-03-19 07:44.36 25,000 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ntasn1.dll 2019-03-19 07:44.35 241,128 del
Microsoft® Windows® Operating System 10.0.18362.86 Microsoft Corporation c:\windows\system32\oleaut32.dll 2019-06-12 04:33.42 797,112 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\policymanager.dll 2019-03-19 07:44.47 514,424 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\profapi.dll 2019-03-19 07:44.36 110,280 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\rasadhlp.dll 2019-03-19 07:45.02 16,896 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\rsaenh.dll 2019-03-19 07:44.35 202,440 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\sechost.dll 2019-03-19 07:44.36 606,104 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\sspicli.dll 2019-03-19 07:44.36 179,944 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\tbs.dll 2019-03-19 07:43.54 48,048 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ucrtbase.dll 2019-03-19 07:44.33 1,020,776 del
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\win32u.dll 2019-06-12 04:33.39 127,064 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\winnsi.dll 2019-03-19 07:44.36 34,808 del
Microsoft® Windows® Operating System 10.0.18362.53 Microsoft Corporation c:\windows\system32\winsta.dll 2019-06-12 04:33.42 358,944 del
Microsoft® Windows® Operating System 10.0.18362.145 Microsoft Corporation c:\windows\system32\wintrust.dll 2019-06-12 04:33.39 363,624 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wtsapi32.dll 2019-03-19 07:44.33 64,792 del
umpdc.dll c:\windows\system32\umpdc.dll 2019-03-19 07:43.49 54,960 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\advapi32.dll 2019-03-19 07:43.54 655,144 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcrypt.dll 2019-03-19 07:44.33 144,144 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\clipc.dll 2019-03-19 07:44.06 183,048 del
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\combase.dll 2019-06-12 04:33.42 3,373,256 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\crypt32.dll 2019-03-19 07:44.33 1,326,856 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\cryptngc.dll 2019-03-19 07:44.06 477,696 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dhcpcsvc.dll 2019-03-19 07:44.33 92,672 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dhcpcsvc6.dll 2019-03-19 07:44.33 68,096 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dnsapi.dll 2019-03-19 07:44.33 818,888 del
Операционная система Microsoft® Windows® 10.0.18362.113 Microsoft Corporation c:\windows\system32\fwpuclnt.dll 2019-06-12 04:33.39 467,456 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\iphlpapi.dll 2019-03-19 07:44.33 229,528 del
Операционная система Microsoft® Windows® 10.0.18362.86 Microsoft Corporation c:\windows\system32\kernel32.dll 2019-06-12 04:33.37 722,072 del
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\kernelbase.dll 2019-06-12 04:33.43 2,763,312 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\mskeyprotect.dll 2019-03-19 07:44.06 62,976 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\mswsock.dll 2019-03-19 07:44.33 407,544 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ncrypt.dll 2019-03-19 07:44.35 144,840 del
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\ntdll.dll 2019-06-12 04:33.42 1,999,440 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\powrprof.dll 2019-03-19 07:44.35 291,336 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\rpcrt4.dll 2019-03-19 07:44.36 1,171,192 del
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\schannel.dll 2019-06-12 04:33.42 537,088 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shcore.dll 2019-03-19 07:44.21 684,352 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shlwapi.dll 2019-03-19 07:45.05 329,200 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\user32.dll 2019-03-19 07:44.15 1,654,544 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\webio.dll 2019-03-19 07:44.35 598,016 del
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\windows.storage.dll 2019-06-12 04:33.39 7,887,656 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\winhttp.dll 2019-03-19 07:44.35 980,248 del
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\wldp.dll 2019-06-12 04:33.42 161,848 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\wlidsvc.dll 2019-03-19 07:44.03 2,157,568 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ws2_32.dll 2019-03-19 07:44.36 443,424 del
Running Processes\svchost.exe -k netsvcs -p -s wlidsvc\Opened Handles\ del
Directory \BaseNamedObjects del
File \Device\CNG del
File \Device\KsecDD del
File \Device\Nsi del
Directory \KnownDlls del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\crypt32.dll.mui 2023-06-12 02:28.22 55,704 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\mswsock.dll.mui 2023-06-12 02:28.23 23,968 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\svchost.exe.mui 2023-06-12 02:28.24 12,680 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\winnlsres.dll.mui 2023-06-12 02:28.24 78,240 del
File C:\Windows\Registration\R000000000006.clb 2023-06-12 00:13.07 27,356 del
Directory C:\Windows\System32 del
File C:\Windows\System32\ru-RU\KernelBase.dll.mui 2019-03-19 14:34.31 1,342,464 del
Key HKLM del
Key HKLM\SOFTWARE\Classes del
Key HKLM\SOFTWARE\Classes\PackagedCom del
Key HKLM\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config del
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\CA del
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Root del
Key HKLM\SOFTWARE\Microsoft\Ole del
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot del
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate del
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\CA del
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\ROOT del
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options del
Key HKLM\SYSTEM\ControlSet001\Control\Nls\CodePage del
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids del
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions del
Key HKLM\SYSTEM\ControlSet001\Control\Session Manager del
Key HKLM\SYSTEM\ControlSet001\Services\crypt32 del
Key HKLM\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces del
Key HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces del
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 del
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 del
Key HKU\.DEFAULT\Control Panel\International del
Key HKU\.DEFAULT\Software\Classes del
Key HKU\.DEFAULT\Software\Classes\Local Settings del
Key HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft del
Running Processes\svchost.exe -k netsvcs -p -s WpnService\ mod
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\coremessaging.dll 2019-03-19 07:44.30 859,632 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\dpapi.dll 2019-03-19 07:44.35 15,872 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\eventaggregation.dll 2019-03-19 07:44.01 78,336 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\execmodelproxy.dll 2019-03-19 07:44.03 83,456 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\keepaliveprovider.dll 2019-03-19 07:44.15 70,656 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ncryptsslp.dll 2019-03-19 07:44.35 134,280 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\netprofm.dll 2019-03-19 07:45.00 226,816 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\netutils.dll 2019-03-19 07:44.35 40,784 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\nlaapi.dll 2019-03-19 07:45.00 93,184 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\npmproxy.dll 2019-03-19 07:45.00 45,056 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\nsi.dll 2019-03-19 07:44.36 25,000 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ntasn1.dll 2019-03-19 07:44.35 241,128 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\onecorecommonproxystub.dll 2019-03-19 07:43.45 479,744 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\policymanager.dll 2019-03-19 07:44.47 514,424 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\rasadhlp.dll 2019-03-19 07:45.02 16,896 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\rmclient.dll 2019-03-19 07:44.15 157,536 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\rsaenh.dll 2019-03-19 07:44.35 202,440 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\sspicli.dll 2019-03-19 07:44.36 179,944 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\staterepository.core.dll 2019-03-19 07:44.15 716,520 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.networking.connectivity.dll 2019-03-19 07:44.00 767,488 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.networking.sockets.pushenabledapplication.dll 2019-03-19 07:44.01 148,480 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.security.authentication.onlineid.dll 2019-03-19 07:44.04 914,944 add
Microsoft® Windows® Operating System 10.0.18362.53 Microsoft Corporation c:\windows\system32\winsta.dll 2019-06-12 04:33.42 358,944 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wkscli.dll 2019-03-19 07:44.35 80,600 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wtsapi32.dll 2019-03-19 07:44.33 64,792 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\appxdeploymentclient.dll 2019-06-12 04:33.39 909,736 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcrypt.dll 2019-03-19 07:44.33 144,144 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dnsapi.dll 2019-03-19 07:44.33 818,888 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\execmodelclient.dll 2019-03-19 07:44.03 318,176 add
Операционная система Microsoft® Windows® 10.0.18362.113 Microsoft Corporation c:\windows\system32\fwpuclnt.dll 2019-06-12 04:33.39 467,456 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\iphlpapi.dll 2019-03-19 07:44.33 229,528 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\mskeyprotect.dll 2019-03-19 07:44.06 62,976 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\mswsock.dll 2019-03-19 07:44.33 407,544 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ncrypt.dll 2019-03-19 07:44.35 144,840 add
Операционная система Microsoft® Windows® 10.0.18362.113 Microsoft Corporation c:\windows\system32\ole32.dll 2019-06-12 04:33.40 1,395,600 add
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\schannel.dll 2019-06-12 04:33.42 537,088 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\twinapi.appcore.dll 2019-03-19 07:44.04 2,473,984 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\wpnprv.dll 2019-06-12 04:33.39 562,176 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ws2_32.dll 2019-03-19 07:44.36 443,424 add
Running Processes\svchost.exe -k netsvcs -p -s WpnService\Opened Handles\ mod
File \Device\Afd add
File \Device\Nsi add
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
File C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db 2023-06-11 22:41.00 4,096 add
File C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-shm 2026-10-07 00:09.23 32,768 add
File C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-wal 2026-10-06 22:16.53 3,588,552 add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\CodePage add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids add
Key HKLM\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces add
Key HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces add
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 add
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 add
Key HKU\.DEFAULT\Control Panel\International add
Key HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\PushNotifications add
Key HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\PushNotifications\wpnidm add
Running Processes\svchost.exe -k netsvcs -p -s WpnService\Opened Ports\ add
TCP 10.0.2.15 49707 172.211.123.250 443 ESTABLISHED add
Running Processes\svchost.exe -k netsvcs -p -s wuauserv\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k NetworkService -p -s CryptSvc\ mod
Microsoft® Windows® Operating System 5.0.1.1 Microsoft Corporation c:\windows\system32\cabinet.dll 2019-03-19 07:44.30 146,200 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cryptbase.dll 2019-03-19 07:44.36 33,848 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cryptnet.dll 2019-03-19 07:44.33 168,448 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cryptsp.dll 2019-03-19 07:44.33 80,112 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\netprofm.dll 2019-03-19 07:45.00 226,816 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\npmproxy.dll 2019-03-19 07:45.00 45,056 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\nsi.dll 2019-03-19 07:44.36 25,000 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\rasadhlp.dll 2019-03-19 07:45.02 16,896 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\rsaenh.dll 2019-03-19 07:44.35 202,440 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\sspicli.dll 2019-03-19 07:44.36 179,944 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\winnsi.dll 2019-03-19 07:44.36 34,808 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dhcpcsvc.dll 2019-03-19 07:44.33 92,672 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dhcpcsvc6.dll 2019-03-19 07:44.33 68,096 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dnsapi.dll 2019-03-19 07:44.33 818,888 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\iphlpapi.dll 2019-03-19 07:44.33 229,528 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\mswsock.dll 2019-03-19 07:44.33 407,544 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\webio.dll 2019-03-19 07:44.35 598,016 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\winhttp.dll 2019-03-19 07:44.35 980,248 add
Running Processes\svchost.exe -k NetworkService -p -s CryptSvc\Opened Handles\ mod
File \Device\Afd del
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 del
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 del
Running Processes\svchost.exe -k NetworkService -p -s CryptSvc\Opened Ports\ del
TCP 10.0.2.15 49705 93.123.17.252 80 ESTABLISHED del
Running Processes\svchost.exe -k NetworkService -p -s Dnscache\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k NetworkService -p -s LanmanWorkstation\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k NetworkService -p -s NlaSvc\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc\ add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\bcryptprimitives.dll 2019-06-12 04:33.43 529,072 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cfgmgr32.dll 2019-03-19 07:44.35 293,344 add
Microsoft® Windows® Operating System 2001.12.10941.16384 Microsoft Corporation c:\windows\system32\clbcatq.dll 2019-03-19 07:44.30 643,752 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\gdi32.dll 2019-03-19 07:44.06 147,912 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\gdi32full.dll 2019-06-12 04:33.43 1,647,584 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\imm32.dll 2019-03-19 07:44.38 176,360 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\kernel.appcore.dll 2019-03-19 07:44.15 59,088 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msasn1.dll 2019-03-19 07:44.35 63,040 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msvcp_win.dll 2019-03-19 07:44.33 639,632 add
Microsoft® Windows® Operating System 7.0.18362.1 Microsoft Corporation c:\windows\system32\msvcrt.dll 2019-03-19 07:44.35 638,072 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\printworkflowproxy.dll 2019-03-19 07:45.00 26,112 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\rmclient.dll 2019-03-19 07:44.15 157,536 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\sechost.dll 2019-03-19 07:44.36 606,104 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ucrtbase.dll 2019-03-19 07:44.33 1,020,776 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\win32u.dll 2019-06-12 04:33.39 127,064 add
Microsoft® Windows® Operating System 10.0.18362.145 Microsoft Corporation c:\windows\system32\wintrust.dll 2019-06-12 04:33.39 363,624 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\advapi32.dll 2019-03-19 07:43.54 655,144 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\combase.dll 2019-06-12 04:33.42 3,373,256 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\crypt32.dll 2019-03-19 07:44.33 1,326,856 add
Операционная система Microsoft® Windows® 10.0.18362.86 Microsoft Corporation c:\windows\system32\kernel32.dll 2019-06-12 04:33.37 722,072 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\kernelbase.dll 2019-06-12 04:33.43 2,763,312 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\ntdll.dll 2019-06-12 04:33.42 1,999,440 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ntmarta.dll 2019-03-19 07:44.35 181,856 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\printworkflowservice.dll 2019-03-19 07:45.00 178,688 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\rpcrt4.dll 2019-03-19 07:44.36 1,171,192 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shcore.dll 2019-03-19 07:44.21 684,352 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\twinapi.appcore.dll 2019-03-19 07:44.04 2,473,984 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\user32.dll 2019-03-19 07:44.15 1,654,544 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\wldp.dll 2019-06-12 04:33.42 161,848 add
Running Processes\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc\Opened Handles\ add
File \Device\CNG add
File \Device\DeviceApi add
Directory \KnownDlls add
Directory \Sessions\1\BaseNamedObjects add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\svchost.exe.mui 2023-06-12 02:28.24 12,680 add
File C:\Windows\Registration\R000000000006.clb 2023-06-12 00:13.07 27,356 add
Directory C:\Windows\System32 add
Key HKLM add
Key HKLM\SOFTWARE\Microsoft\Ole add
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\Server add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions add
Key HKLM\SYSTEM\ControlSet001\Control\Session Manager add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft add
Running Processes\svchost.exe -k RPCSS -p\ mod
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cfgmgr32.dll 2019-03-19 07:44.35 293,344 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cryptsp.dll 2019-03-19 07:44.33 80,112 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\gdi32.dll 2019-03-19 07:44.06 147,912 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\gdi32full.dll 2019-06-12 04:33.43 1,647,584 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\profapi.dll 2019-03-19 07:44.36 110,280 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\sfc.dll 2019-03-19 07:44.00 3,072 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\sfc_os.dll 2019-03-19 07:44.00 48,640 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\version.dll 2019-03-19 07:45.05 30,680 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\win32u.dll 2019-06-12 04:33.39 127,064 add
Windows Installer - Unicode 5.0.18362.175 Microsoft Corporation c:\windows\system32\msi.dll 2019-06-12 04:33.52 4,577,280 add
Windows Installer - Unicode 5.0.18362.1 Microsoft Corporation c:\windows\system32\msiltcfg.dll 2019-03-19 07:45.45 21,504 add
Операционная система Microsoft® Windows® 10.0.18362.113 Microsoft Corporation c:\windows\system32\ole32.dll 2019-06-12 04:33.40 1,395,600 add
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\shell32.dll 2019-06-12 04:33.41 7,241,800 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shlwapi.dll 2019-03-19 07:45.05 329,200 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\srpapi.dll 2019-03-19 07:44.28 159,232 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\user32.dll 2019-03-19 07:44.15 1,654,544 add
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\windows.storage.dll 2019-06-12 04:33.39 7,887,656 add
Операционная система Microsoft® Windows® 6.10.18362.175 Microsoft Corporation c:\windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.175_none_e6c3ab1f131014c9\comctl32.dll 2019-06-12 04:33.44 2,624,824 add
Running Processes\svchost.exe -k RPCSS -p\Opened Handles\ mod
Directory \BaseNamedObjects del
File \Device\Afd del
File \Device\CNG del
File \Device\KsecDD del
File \Device\NamedPipe\epmapper del
File \Device\NamedPipe\Winsock2\CatalogChangeListener-3dc-0 del
File \Device\Nsi del
Directory \KnownDlls del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\mswsock.dll.mui 2023-06-12 02:28.23 23,968 del
File C:\Windows\Registration\R000000000006.clb 2023-06-12 00:13.07 27,356 del
Directory C:\Windows\System32 del
File C:\Windows\System32\ru-RU\combase.dll.mui 2019-03-19 14:34.30 40,960 del
File C:\Windows\System32\ru-RU\KernelBase.dll.mui 2019-03-19 14:34.31 1,342,464 del
Key HKLM del
Key HKLM\SOFTWARE\Classes del
Key HKLM\SOFTWARE\Classes\ActivatableClasses del
Key HKLM\SOFTWARE\Classes\ActivatableClasses\Package del
Key HKLM\SOFTWARE\Microsoft\Ole del
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options del
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime del
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId del
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\Server del
Key HKLM\SOFTWARE\Policies del
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids del
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions del
Key HKLM\SYSTEM\ControlSet001\Control\Session Manager del
Key HKLM\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces del
Key HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces del
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 del
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 del
Key HKU\S-1-5-20\Control Panel\International del
Directory \BaseNamedObjects add
File \Device\Afd add
File \Device\CNG add
File \Device\DeviceApi add
File \Device\KsecDD add
File \Device\NamedPipe\epmapper add
File \Device\NamedPipe\Winsock2\CatalogChangeListener-3dc-0 add
File \Device\Nsi add
Directory \KnownDlls add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\mswsock.dll.mui 2023-06-12 02:28.23 23,968 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\svchost.exe.mui 2023-06-12 02:28.24 12,680 add
File C:\Windows\Registration\R000000000006.clb 2023-06-12 00:13.07 27,356 add
Directory C:\Windows\System32 add
File C:\Windows\System32\ru-RU\combase.dll.mui 2019-03-19 14:34.30 40,960 add
File C:\Windows\System32\ru-RU\KernelBase.dll.mui 2019-03-19 14:34.31 1,342,464 add
Directory C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.175_none_e6c3ab1f131014c9 add
Key HKLM add
Key HKLM\SOFTWARE\Classes add
Key HKLM\SOFTWARE\Classes\ActivatableClasses add
Key HKLM\SOFTWARE\Classes\ActivatableClasses\Package add
Key HKLM\SOFTWARE\Microsoft\Ole add
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\Server add
Key HKLM\SOFTWARE\Policies add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions add
Key HKLM\SYSTEM\ControlSet001\Control\Session Manager add
Key HKLM\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces add
Key HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces add
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 add
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 add
Key HKU\S-1-5-20\Control Panel\International add
Running Processes\svchost.exe -k UnistackSvcGroup\Opened Handles\ mod
File C:\Users\user\AppData\Local\Comms\UnistoreDB\USS.jtx 2026-10-07 00:07.13 3,145,728 old
File C:\Users\user\AppData\Local\Comms\UnistoreDB\USS.jtx 2026-10-07 00:09.13 3,145,728 new
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k UnistackSvcGroup -s CDPUserSvc\Opened Handles\ mod
File C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user\ActivitiesCache.db-wal 2026-10-07 00:07.09 45,352 old
File C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user\ActivitiesCache.db-wal 2026-10-07 00:08.38 531,512 new
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k UnistackSvcGroup -s WpnUserService\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\svchost.exe -k utcsvc -p\Opened Handles\ mod
File \Device\Afd del
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections del
Running Processes\svchost.exe -k utcsvc -p\Opened Ports\ del
TCP 10.0.2.15 49706 20.184.175.22 443 ESTABLISHED del
Running Processes\SystemSettings.exe -ServerName:microsoft.windows.immersivecontrolpanel\ add
Internet Explorer 11.0.18362.116 Microsoft Corporation c:\windows\system32\iertutil.dll 2019-06-12 04:33.44 2,769,976 add
Internet Explorer 11.0.18362.175 Microsoft Corporation c:\windows\system32\urlmon.dll 2019-06-12 04:33.44 1,853,440 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\immersivecontrolpanel\systemsettings.dll 2019-03-19 07:46.39 7,061,504 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\immersivecontrolpanel\systemsettingsviewmodel.desktop.dll 2019-03-19 07:46.39 964,096 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\immersivecontrolpanel\telemetry.common.dll 2019-03-19 07:46.39 55,296 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcastdvr.proxy.dll 2019-03-19 07:44.01 261,120 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcd.dll 2019-03-19 07:44.35 123,632 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcp47langs.dll 2019-03-19 07:44.15 369,504 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcp47mrm.dll 2019-03-19 07:44.15 186,672 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\bcryptprimitives.dll 2019-06-12 04:33.43 529,072 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cfgmgr32.dll 2019-03-19 07:44.35 293,344 add
Microsoft® Windows® Operating System 2001.12.10941.16384 Microsoft Corporation c:\windows\system32\clbcatq.dll 2019-03-19 07:44.30 643,752 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\coremessaging.dll 2019-03-19 07:44.30 859,632 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\coreuicomponents.dll 2019-03-19 07:44.09 3,323,336 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\credui.dll 2019-03-19 07:44.46 49,152 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cryptbase.dll 2019-03-19 07:44.36 33,848 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cryptsp.dll 2019-03-19 07:44.33 80,112 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\d3d10warp.dll 2019-03-19 07:44.11 7,582,752 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\d3d11.dll 2019-03-19 07:44.11 2,466,296 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\dataexchange.dll 2019-03-19 07:44.03 222,208 add
Microsoft® Windows® Operating System 10.0.18362.145 Microsoft Corporation c:\windows\system32\dcomp.dll 2019-06-12 04:33.40 1,940,952 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\devobj.dll 2019-03-19 07:44.35 158,592 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\directmanipulation.dll 2019-03-19 07:44.03 610,216 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\dsrole.dll 2019-03-19 07:44.35 28,936 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\dxcore.dll 2019-03-19 07:44.06 112,296 add
Microsoft® Windows® Operating System 10.0.18362.145 Microsoft Corporation c:\windows\system32\dxgi.dll 2019-06-12 04:33.38 939,504 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\efsutil.dll 2019-03-19 07:44.47 45,056 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\errordetailscore.dll 2019-03-19 07:44.04 46,592 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ethernetmediamanager.dll 2019-03-19 07:44.20 186,368 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\execmodelproxy.dll 2019-03-19 07:44.03 83,456 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\fhsvcctl.dll 2019-03-19 07:45.54 29,696 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\gdi32.dll 2019-03-19 07:44.06 147,912 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\gdi32full.dll 2019-06-12 04:33.43 1,647,584 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\globinputhost.dll 2019-03-19 07:44.15 130,560 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\idstore.dll 2019-03-19 07:43.57 154,112 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\imm32.dll 2019-03-19 07:44.38 176,360 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\inputhost.dll 2019-03-19 07:44.12 1,052,096 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\kernel.appcore.dll 2019-03-19 07:44.15 59,088 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ksuser.dll 2019-03-19 07:43.47 23,264 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\languageoverlayutil.dll 2019-03-19 07:43.45 170,656 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\logoncli.dll 2019-03-19 07:44.35 259,776 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\mfcore.dll 2019-06-12 04:33.57 4,128,904 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\mrmcorer.dll 2019-03-19 07:44.15 1,120,976 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msasn1.dll 2019-03-19 07:44.35 63,040 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msvcp110_win.dll 2019-03-19 07:43.45 560,584 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msvcp_win.dll 2019-03-19 07:44.33 639,632 add
Microsoft® Windows® Operating System 7.0.18362.1 Microsoft Corporation c:\windows\system32\msvcrt.dll 2019-03-19 07:44.35 638,072 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ncaapi.dll 2019-03-19 07:44.47 25,600 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\netapi32.dll 2019-03-19 07:44.00 80,600 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\netprofm.dll 2019-03-19 07:45.00 226,816 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\netutils.dll 2019-03-19 07:44.35 40,784 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\networkuxbroker.dll 2019-03-19 07:44.20 419,840 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\npmproxy.dll 2019-03-19 07:45.00 45,056 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ntasn1.dll 2019-03-19 07:44.35 241,128 add
Microsoft® Windows® Operating System 10.0.18362.86 Microsoft Corporation c:\windows\system32\oleaut32.dll 2019-06-12 04:33.42 797,112 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ondemandbrokerclient.dll 2019-03-19 07:44.06 47,616 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\onecorecommonproxystub.dll 2019-03-19 07:43.45 479,744 add
Microsoft® Windows® Operating System 10.0.18362.86 Microsoft Corporation c:\windows\system32\onecoreuapcommonproxystub.dll 2019-06-12 04:33.37 7,831,368 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\photometadatahandler.dll 2019-03-19 07:44.11 491,520 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\policymanager.dll 2019-03-19 07:44.47 514,424 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\profapi.dll 2019-03-19 07:44.36 110,280 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\regapi.dll 2019-03-19 07:44.33 105,472 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\rmclient.dll 2019-03-19 07:44.15 157,536 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\rtworkq.dll 2019-03-19 07:43.47 168,056 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\samcli.dll 2019-03-19 07:44.35 78,848 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\samlib.dll 2019-03-19 07:44.35 122,368 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\sechost.dll 2019-03-19 07:44.36 606,104 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\settingsenvironment.desktop.dll 2019-03-19 07:44.21 445,440 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\settingshandlers_nt.dll 2019-03-19 07:45.00 3,748,864 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\settingshandlers_user.dll 2019-03-19 07:44.23 593,920 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\shacct.dll 2019-03-19 07:44.28 140,288 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\shgina.dll 2019-03-19 07:44.48 28,672 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\srvcli.dll 2019-03-19 07:44.35 112,088 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\sspicli.dll 2019-03-19 07:44.36 179,944 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\staterepository.core.dll 2019-03-19 07:44.15 716,520 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\systemsettings.datamodel.dll 2019-03-19 07:43.54 397,112 add
Microsoft® Windows® Operating System 10.0.18362.145 Microsoft Corporation c:\windows\system32\taskflowdataengine.dll 2019-06-12 04:33.35 1,635,328 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\textinputframework.dll 2019-03-19 07:44.11 642,216 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\threadpoolwinrt.dll 2019-03-19 07:44.04 67,072 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ucrtbase.dll 2019-03-19 07:44.33 1,020,776 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\uiamanager.dll 2019-03-19 07:44.03 677,888 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\usermgrproxy.dll 2019-03-19 07:44.38 294,912 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\vssapi.dll 2019-03-19 07:44.21 1,631,232 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\win32u.dll 2019-06-12 04:33.39 127,064 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wincorlib.dll 2019-03-19 07:44.33 435,200 add
Microsoft® Windows® Operating System 10.0.18362.86 Microsoft Corporation c:\windows\system32\windows.globalization.dll 2019-06-12 04:33.37 1,784,832 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.graphics.dll 2019-03-19 07:44.06 525,824 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.shell.servicehostbuilder.dll 2019-03-19 07:44.12 96,768 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.staterepositorycore.dll 2019-03-19 07:44.15 45,568 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.staterepositoryps.dll 2019-03-19 07:44.15 1,274,336 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.ui.core.textinput.dll 2019-03-19 07:44.11 916,480 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.ui.dll 2019-03-19 07:44.00 1,383,648 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.ui.xaml.phone.dll 2019-03-19 07:44.01 1,233,920 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windowscodecs.dll 2019-03-19 07:44.11 1,764,544 add
Microsoft® Windows® Operating System 10.0.18362.53 Microsoft Corporation c:\windows\system32\winsta.dll 2019-06-12 04:33.42 358,944 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wkscli.dll 2019-03-19 07:44.35 80,600 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wlidprov.dll 2019-03-19 07:44.03 650,752 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wmi.dll 2019-03-19 07:44.36 5,632 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wmiclnt.dll 2019-03-19 07:43.45 46,592 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wtsapi32.dll 2019-03-19 07:44.33 64,792 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\xmllite.dll 2019-03-19 07:44.38 211,216 add
umpdc.dll c:\windows\system32\umpdc.dll 2019-03-19 07:43.49 54,960 add
Windows Installer - Unicode 5.0.18362.175 Microsoft Corporation c:\windows\system32\msi.dll 2019-06-12 04:33.52 4,577,280 add
Μîсгôѕøƒť® Ẃíņðōшş® Ωφéѓăτíñĝ Śỳѕŧèm 10.0.18362.30 Microsoft Corporation c:\windows\system32\dsreg.dll 2019-06-12 04:33.35 824,832 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\advapi32.dll 2019-03-19 07:43.54 655,144 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\appcontracts.dll 2019-03-19 07:44.03 955,488 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\appxdeploymentclient.dll 2019-06-12 04:33.39 909,736 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcrypt.dll 2019-03-19 07:44.33 144,144 add
Операционная система Microsoft® Windows® 10.0.18362.113 Microsoft Corporation c:\windows\system32\cdp.dll 2019-06-12 04:33.59 5,499,904 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\combase.dll 2019-06-12 04:33.42 3,373,256 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\credprovhost.dll 2019-03-19 07:44.45 386,560 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\crypt32.dll 2019-03-19 07:44.33 1,326,856 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\d2d1.dll 2019-03-19 07:44.11 6,066,808 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dui70.dll 2019-03-19 07:44.47 1,748,992 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dwmapi.dll 2019-03-19 07:44.30 162,392 add
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\dwrite.dll 2019-06-12 04:33.38 3,094,528 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\edputil.dll 2019-03-19 07:44.47 119,808 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\fhcfg.dll 2019-03-19 07:45.54 430,080 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\fhsettingsprovider.dll 2019-03-19 07:45.54 441,344 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\iphlpapi.dll 2019-03-19 07:44.33 229,528 add
Операционная система Microsoft® Windows® 10.0.18362.86 Microsoft Corporation c:\windows\system32\kernel32.dll 2019-06-12 04:33.37 722,072 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\kernelbase.dll 2019-06-12 04:33.43 2,763,312 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\mfplat.dll 2019-03-19 14:37.06 2,072,384 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\miracastreceiver.dll 2019-06-12 04:33.37 1,333,248 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\mpr.dll 2019-03-19 07:44.36 98,664 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\msctf.dll 2019-03-19 07:44.33 1,263,096 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\msftedit.dll 2019-03-19 07:44.03 3,353,088 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ncrypt.dll 2019-03-19 07:44.35 144,840 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\ntdll.dll 2019-06-12 04:33.42 1,999,440 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ntmarta.dll 2019-03-19 07:44.35 181,856 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ntshrui.dll 2019-03-19 07:44.30 497,664 add
Операционная система Microsoft® Windows® 10.0.18362.113 Microsoft Corporation c:\windows\system32\ole32.dll 2019-06-12 04:33.40 1,395,600 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\onebackuphandler.dll 2019-03-19 07:45.54 359,936 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\pdh.dll 2019-03-19 07:44.47 278,016 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\powrprof.dll 2019-03-19 07:44.35 291,336 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\rpcrt4.dll 2019-03-19 07:44.36 1,171,192 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\sdengin2.dll 2019-03-19 07:45.34 1,193,472 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shcore.dll 2019-03-19 07:44.21 684,352 add
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\shell32.dll 2019-06-12 04:33.41 7,241,800 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shlwapi.dll 2019-03-19 07:45.05 329,200 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\slc.dll 2019-03-19 07:44.32 140,800 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\spp.dll 2019-03-19 07:45.34 272,384 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\sppc.dll 2019-03-19 07:44.32 136,192 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\thumbcache.dll 2019-03-19 07:44.03 375,096 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\twinapi.appcore.dll 2019-03-19 07:44.04 2,473,984 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\twinapi.dll 2019-03-19 07:44.33 636,416 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\twinui.dll 2019-06-12 04:33.42 6,381,568 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\user32.dll 2019-03-19 07:44.15 1,654,544 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\usercpl.dll 2019-03-19 07:43.57 745,984 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\uxtheme.dll 2019-03-19 07:44.33 606,208 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\vsstrace.dll 2019-03-19 07:44.21 69,632 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\wevtapi.dll 2019-03-19 07:44.18 379,128 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.applicationmodel.dll 2019-03-19 07:44.03 902,320 add
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\windows.storage.dll 2019-06-12 04:33.39 7,887,656 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.ui.immersive.dll 2019-03-19 07:44.50 1,097,216 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.ui.xaml.controls.dll 2019-03-19 07:44.01 4,851,712 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\windows.ui.xaml.dll 2019-06-12 04:33.37 17,786,368 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.web.dll 2019-03-19 07:44.01 758,784 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\winhttp.dll 2019-03-19 07:44.35 980,248 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\winlangdb.dll 2019-03-19 07:44.15 199,168 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\wintypes.dll 2019-03-19 07:44.33 1,393,960 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ws2_32.dll 2019-03-19 07:44.36 443,424 add
Операционная система Microsoft® Windows® 6.10.18362.175 Microsoft Corporation c:\windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.175_none_e6c3ab1f131014c9\comctl32.dll 2019-06-12 04:33.44 2,624,824 add
Служба Windows® Search 7.0.18362.1 Microsoft Corporation c:\windows\system32\propsys.dll 2019-03-19 07:44.15 977,680 add
Running Processes\SystemSettings.exe -ServerName:microsoft.windows.immersivecontrolpanel\Opened Handles\ add
File \Device\CNG add
File \Device\DeviceApi add
File \Device\KsecDD add
Directory \KnownDlls add
Key \REGISTRY\A\{E8F33BC0-48C7-489A-BD59-CF9945E9D496} add
Directory \Sessions\1\BaseNamedObjects add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\ImmersiveControlPanel\ru-RU\SystemSettings.exe.mui 2023-06-12 02:28.21 15,760 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\usercpl.dll.mui 2023-06-12 02:28.24 82,336 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\windows.ui.xaml.dll.mui 2023-06-12 02:28.24 29,592 add
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db 2023-06-12 15:55.30 1,048,576 add
File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db 2023-09-08 11:07.24 29,232 add
File C:\Windows\Fonts\segoeui.ttf 2019-03-19 07:44.11 955,804 add
File C:\Windows\Fonts\segoeuil.ttf 2019-03-19 07:44.11 913,712 add
Directory C:\Windows\ImmersiveControlPanel add
File C:\Windows\Registration\R000000000006.clb 2023-06-12 00:13.07 27,356 add
Directory C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.175_none_e6c3ab1f131014c9 add
Key HKLM add
Key HKLM\SOFTWARE\Classes add
Key HKLM\SOFTWARE\Classes\ActivatableClasses add
Key HKLM\SOFTWARE\Classes\ActivatableClasses\Package add
Key HKLM\SOFTWARE\Classes\Extensions add
Key HKLM\SOFTWARE\Classes\Extensions\ContractId add
Key HKLM\SOFTWARE\Microsoft\Internet Explorer\Main add
Key HKLM\SOFTWARE\Microsoft\Internet Explorer\Security add
Key HKLM\SOFTWARE\Microsoft\Ole add
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings add
Key HKLM\SOFTWARE\Microsoft\Windows\Dwm add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\Server add
Key HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services add
Key HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings add
Key HKLM\SYSTEM\ControlSet001\Control\NetworkProvider\HwOrder add
Key HKLM\SYSTEM\ControlSet001\Control\NetworkProvider\ProviderOrder add
Key HKLM\SYSTEM\ControlSet001\Control\NetworkUxManager add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\CodePage add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions add
Key HKLM\SYSTEM\ControlSet001\Control\Terminal Server add
Key HKLM\SYSTEM\ControlSet001\Services\crypt32 add
Key HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters add
Key HKU add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001 add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Control Panel\Accessibility add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Control Panel\Colors add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Input\EC add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Internet Explorer\Main add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Internet Explorer\Security add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\CDP add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Holographic add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Lock Screen add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Mobility add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\ActivatableClasses add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\ActivatableClasses\Package add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\ActivatableClasses\Package\windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h2txyewy add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Extensions add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Extensions\ContractId add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft add
Running Processes\SysTracer.exe\ mod
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcp47langs.dll 2019-03-19 07:44.15 369,504 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\linkinfo.dll 2019-03-19 07:44.30 30,720 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\appresolver.dll 2019-03-19 07:44.21 558,344 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\slc.dll 2019-03-19 07:44.32 140,800 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\sppc.dll 2019-03-19 07:44.32 136,192 add
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\userenv.dll 2019-06-12 04:33.42 139,472 add
Running Processes\SysTracer.exe\Opened Handles\ mod
File C:\ del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\advapi32.dll.mui 2023-06-12 02:28.22 14,216 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\apphelp.dll.mui 2023-06-12 02:28.22 13,704 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\bcrypt.dll.mui 2023-06-12 02:28.22 13,720 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\comdlg32.dll.mui 2023-06-12 02:28.22 70,552 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\d2d1.dll.mui 2023-06-12 02:28.22 301,456 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\dhcpcsvc.dll.mui 2023-06-12 02:28.22 13,216 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\dhcpcsvc6.dll.mui 2023-06-12 02:28.22 39,832 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\dnsapi.dll.mui 2023-06-12 02:28.22 81,312 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\DWrite.dll.mui 2023-06-12 02:28.22 12,680 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\fwpuclnt.dll.mui 2023-06-12 02:28.22 174,496 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\iertutil.dll.mui 2023-06-12 02:28.23 13,704 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\iphlpapi.dll.mui 2023-06-12 02:28.23 14,240 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\jscript9.dll.mui 2023-06-12 02:28.23 45,984 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\mlang.dll.mui 2023-06-12 02:28.23 28,064 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\msctf.dll.mui 2023-06-12 02:28.23 14,736 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\msimtf.dll.mui 2023-06-12 02:28.23 12,704 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\mskeyprotect.dll.mui 2023-06-12 02:28.23 12,704 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\ncrypt.dll.mui 2023-06-12 02:28.23 16,776 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\ntmarta.dll.mui 2023-06-12 02:28.23 17,296 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\oledlg.dll.mui 2023-06-12 02:28.23 40,328 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\powrprof.dll.mui 2023-06-12 02:28.24 80,784 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\propsys.dll.mui 2023-06-12 02:28.24 94,112 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\rpcrt4.dll.mui 2023-06-12 02:28.24 32,664 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\schannel.dll.mui 2023-06-12 02:28.24 15,256 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\SHCore.dll.mui 2023-06-12 02:28.24 12,696 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\shlwapi.dll.mui 2023-06-12 02:28.24 14,752 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\twinapi.appcore.dll.mui 2023-06-12 02:28.24 17,800 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\UIAutomationCore.dll.mui 2023-06-12 02:28.24 30,096 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\uxtheme.dll.mui 2023-06-12 02:28.24 18,824 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\webio.dll.mui 2023-06-12 02:28.24 51,608 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\windows.storage.dll.mui 2023-06-12 02:28.24 40,864 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\winhttp.dll.mui 2023-06-12 02:28.24 31,120 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\wininet.dll.mui 2023-06-12 02:28.24 44,944 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\wintypes.dll.mui 2023-06-12 02:28.24 12,704 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\wldp.dll.mui 2023-06-12 02:28.24 17,312 add
File C:\Users\user\Desktop\tools\SysTracer x64\data\snap-1.tmp 2026-10-07 00:09.02 0 del
File C:\Users\user\Desktop\tools\SysTracer x64\data\snap-2.tmp 2026-10-07 00:13.11 0 add
Directory C:\Windows del
File C:\Windows\System32\en-US\ntasn1.dll.mui 2019-03-19 14:34.30 3,072 add
File C:\Windows\System32\en-US\rsaenh.dll.mui 2019-03-19 14:34.30 9,728 add
File C:\Windows\System32\en-US\sechost.dll.mui 2019-03-19 14:34.30 2,560 add
File C:\Windows\System32\ru-RU\combase.dll.mui 2019-03-19 14:34.30 40,960 add
File C:\Windows\System32\ru-RU\kernel32.dll.mui 2019-03-19 14:34.33 1,042,944 add
File C:\Windows\System32\ru-RU\KernelBase.dll.mui 2019-03-19 14:34.31 1,342,464 add
File C:\Windows\System32\ru-RU\ntdll.dll.mui 2019-03-19 14:34.30 484,864 add
File C:\Windows\System32\ru-RU\ole32.dll.mui 2019-03-19 14:34.30 31,232 add
File C:\Windows\System32\ru-RU\shell32.dll.mui 2019-03-19 14:34.32 478,720 add
File C:\Windows\System32\ru-RU\srpapi.dll.mui 2019-03-19 14:34.30 8,704 add
File C:\Windows\System32\ru-RU\winspool.drv.mui 2019-03-19 14:34.27 84,480 add
File C:\Windows\System32\ru-RU\ws2_32.dll.mui 2019-03-19 14:34.30 24,576 add
Directory C:\Windows\WinSxS del
Directory C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.18362.175_ru-ru_89567a6fc412ca34 add
File C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.18362.175_ru-ru_89567a6fc412ca34\comctl32.dll.mui 2019-06-12 04:33.42 6,144 add
Directory C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.18362.175_ru-ru_45f00bb890bb425d add
File C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.18362.175_ru-ru_45f00bb890bb425d\comctl32.dll.mui 2019-06-12 04:33.42 12,288 add
Key HKLM\SOFTWARE\Classes\CLSID del
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2112AB0A-C86A-4ffe-A368-0DE96E47012E}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2400183A-6185-49FB-A2D8-4A392A602BA3}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{24D89E24-2F19-4534-9DDE-6A6671FBB8FE}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2B20DF75-1EDA-4039-8097-38798227D5B7}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{339719B5-8C47-4894-94C2-D8F77ADD44A6}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{33E28130-4E1E-4676-835A-98395C3BC3BB}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{374DE290-123F-4565-9164-39C4925E467B}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{491E922F-5643-4af4-A7EB-4E7A138D8174}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{4BD8D571-6D19-48D3-BE97-422220080E43}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52528A6B-B9E3-4add-B60D-588C2DBA842D}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{56784854-C6CB-462B-8169-88E350ACB882}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{767E6811-49CB-4273-87C2-20F355E1085B}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7b0db17d-9cd2-4a93-9733-46cc89022e7c}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9B74B6A3-0DFD-4f11-9E78-5F7800F2E772}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A302545D-DEFF-464b-ABE8-61C8648D939B}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A990AE9F-A03B-4e80-94BC-9912D7504104}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C3F2459E-80D6-45DC-BFEF-1F769F2BE730}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{E25B5812-BE88-4bd9-94B0-29233477B6C3}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f3ce0f7c-4901-4acc-8648-d5d44b04ef8f}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag add
Key HKLM\SOFTWARE\WOW6432Node\Classes add
Key HKLM\SOFTWARE\WOW6432Node\Clients add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Cellular add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\COM3 add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Calais\Current add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Calais\Readers add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Services add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\CTF\SystemShared add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\CTF\TIP add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\DeviceReg add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\DFS add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Driver Signing add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\EnterpriseCertificates add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\EventSystem add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\FingerKB add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\FuzzyDS add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Input add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\LanguageOverlay add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Messaging add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\MSMQ add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\MTFFuzzyFactors add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\MTFInputType add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\MTFKeyboardMappings add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Non-Driver Signing add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Notepad\DefaultFonts add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Ole add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Phone add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Pim add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Poom add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Ras add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Rpc add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\SecurityManager add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Semgr add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Shell add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Software\Microsoft\Shared Tools\Msinfo add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\SystemCertificates add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\TermServLicensing add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Transaction Server add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Unified Store add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\UserData add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Console add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Containers add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\FontDPI add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\FontLink add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\FontMapper add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Fonts add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\FontSubstitutes add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\GRE_Initialize add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\LanguagePack add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\NetworkCards add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Perflib add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Ports add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Print add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\ProfileList add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Time Zones add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows Search add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\App Paths add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Control Panel\Cursors\Schemes add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Control Panel\Theme add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Control Panel\ThemeVolatile add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\DriveIcons add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\KindMap add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Group Policy add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Parental Controls add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\PreviewHandlers add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Setup add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Telephony\Locations add
Key HKLM\SOFTWARE\WOW6432Node\Microsoft\XAML add
Key HKLM\SOFTWARE\WOW6432Node\Policies add
Key HKLM\SOFTWARE\WOW6432Node\RegisteredApplications add
Key HKLM\SYSTEM\ControlSet001\Control\Print\Printers add
Key HKLM\SYSTEM\ControlSet001\Control\Video\{7C8C3757-C0DF-11F1-B68A-806E6F6E6963}\0000 add
Key HKLM\SYSTEM\ControlSet001\Hardware Profiles\Current add
Key HKLM\SYSTEM\ControlSet001\Services\.NET CLR Data\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\.NET CLR Networking 4.0.0.0\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\.NET CLR Networking\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\.NET Data Provider for Oracle\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\.NET Data Provider for SqlServer\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\.NET Memory Cache 4.0\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\.NETFramework\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\BITS\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\ESENT\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\Lsa\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\LSM\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\MSDTC Bridge 4.0.0.0\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\MSDTC\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\MSSCNTRS\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\PerfDisk\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\PerfNet\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\PerfOS\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\PerfProc\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\rdyboost\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\RemoteAccess\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\SMSvcHost 4.0.0.0\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\Spooler\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\TapiSrv\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\Tcpip\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\TermService\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\UGatherer\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\UGTHRSVC\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\usbhub\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\Windows Workflow Foundation 4.0.0.0\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\WmiApRpl\Performance add
Key HKLM\SYSTEM\ControlSet001\Services\WSearchIdxPi\Performance add
Key HKLM\SYSTEM\CurrentControlSet add
Key HKLM\SYSTEM\HardwareConfig\Current add
Key HKU\S-1-5-18 add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts add
Running Processes\taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}\Opened Handles\ mod
File C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat 2026-10-07 00:06.27 33,030,144 old
File C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat 2026-10-07 00:11.50 33,554,432 new
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\VGAuthService.exe\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\vm3dservice.exe\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\vm3dservice.exe -n\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\Windows.WARP.JITService.exe 49a3517b-5cdc-48e8-a687-7ff5b9ff26b7 S-1-15-2-3624051433-2125758914-1423191267-1740899205-1073925389-3782572162-737981194 S-1-5-21-2292890337-69778762-837601055-1001 520\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\winlogon.exe\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\WINWORD.EXE /n "C:\Users\user\Desktop\lab1\src\GreyEnergyDropper.doc\ add
Internet Explorer 11.0.18362.116 Microsoft Corporation c:\windows\system32\iertutil.dll 2019-06-12 04:33.44 2,769,976 add
Internet Explorer 11.0.18362.175 Microsoft Corporation c:\windows\system32\urlmon.dll 2019-06-12 04:33.44 1,853,440 add
Internet Explorer 11.0.18362.116 Microsoft Corporation c:\windows\system32\wininet.dll 2019-06-12 04:33.43 5,040,640 add
Microsoft Office 2016 16.0.4618.1000 Microsoft Corporation c:\program files\common files\microsoft shared\office16\mso.dll 2017-11-14 13:16.34 19,814,632 add
Microsoft Office 2016 16.0.4591.1000 Microsoft Corporation c:\program files\common files\microsoft shared\office16\mso20win32client.dll 2017-11-14 13:16.34 3,161,344 add
Microsoft Office 2016 16.0.4618.1000 Microsoft Corporation c:\program files\common files\microsoft shared\office16\mso30win32client.dll 2017-11-14 13:16.34 4,766,952 add
Microsoft Office 2016 16.0.4627.1000 Microsoft Corporation c:\program files\common files\microsoft shared\office16\mso40uiwin32client.dll 2017-11-15 15:27.44 9,352,424 add
Microsoft Office 2016 16.0.4618.1000 Microsoft Corporation c:\program files\common files\microsoft shared\office16\mso99lwin32client.dll 2017-11-14 13:16.34 8,157,416 add
Microsoft Office 2016 16.0.4266.1001 Microsoft Corporation c:\program files\common files\microsoft shared\office16\msptls.dll 2015-07-31 09:57.10 1,499,840 add
Microsoft Office 2016 16.0.4266.1001 Microsoft Corporation c:\program files\common files\microsoft shared\office16\riched20.dll 2015-07-31 09:57.10 2,234,536 add
Microsoft Office 2016 16.0.4266.1001 Microsoft Corporation c:\program files\common files\microsoft shared\proof\mslid.dll 2015-07-31 09:57.10 553,648 add
Microsoft Office 2016 16.0.4266.1001 Microsoft Corporation c:\program files\microsoft office\office16\chart.dll 2015-07-31 09:57.10 11,483,832 add
Microsoft Office 2016 16.0.4266.1001 Microsoft Corporation c:\program files\microsoft office\office16\oart.dll 2015-07-31 09:57.10 18,238,120 add
Microsoft Office 2016 16.0.4627.1000 Microsoft Corporation c:\program files\microsoft office\office16\wwlib.dll 2017-11-15 15:35.08 37,183,656 add
Microsoft Office InfoPath 16.0.4266.1001 Microsoft Corporation c:\program files\common files\microsoft shared\office16\msoxmlmf.dll 2015-07-31 09:57.12 65,736 add
Microsoft Office Template and Media Control 15.0.4420.0 Microsoft Corporation c:\program files\microsoft office\office16\ieawsdc.dll 2015-07-31 09:57.12 293,032 add
Microsoft Visual Basic for Applications 7.1.16.4266 Microsoft Corporation c:\program files\common files\microsoft shared\vba\vba7.1\vbeui.dll 2015-07-31 09:57.10 2,624,744 add
Microsoft XML Core Services 8.110.18362.175 Microsoft Corporation c:\windows\system32\msxml3.dll 2019-06-12 04:33.44 1,697,792 add
Microsoft XML Core Services 6.30.18362.175 Microsoft Corporation c:\windows\system32\msxml6.dll 2019-06-12 04:33.38 2,449,456 add
Microsoft ® JScript 5.812.10240.16384 Microsoft Corporation c:\windows\system32\jscript.dll 2019-06-12 04:33.51 840,192 add
Microsoft ® Script Runtime 5.812.10240.16384 Microsoft Corporation c:\windows\system32\scrrun.dll 2019-03-19 07:45.02 221,184 add
Microsoft ® Windows Script Host Runtime Library 5.812.10240.16384 Microsoft Corporation c:\windows\system32\wshom.ocx 2019-03-19 07:45.02 142,848 add
Microsoft® .NET Framework 4.8.4180.0 Microsoft Corporation c:\windows\microsoft.net\framework64\v4.0.30319\mscoreei.dll 2020-03-27 02:10.19 689,952 add
Microsoft® Forms 16.0.4266.1001 Microsoft Corporation c:\windows\system32\fm20.dll 2015-07-31 09:57.08 1,646,248 add
Microsoft® Forms 16.0.4266.1001 Microsoft Corporation c:\windows\system32\fm20enu.dll 2015-07-31 10:01.26 31,944 add
Microsoft® Visual Studio® 14.32.31332.0 Microsoft Corporation c:\windows\system32\msvcp140.dll 2022-06-10 19:52.30 571,312 add
Microsoft® Visual Studio® 14.32.31332.0 Microsoft Corporation c:\windows\system32\vcruntime140.dll 2022-06-10 19:52.32 98,736 add
Microsoft® Visual Studio® 14.32.31332.0 Microsoft Corporation c:\windows\system32\vcruntime140_1.dll 2022-06-10 19:52.30 38,304 add
Microsoft® Visual Studio® 2010 10.0.40219.1 Microsoft Corporation c:\windows\system32\msvcr100.dll 2015-07-31 09:57.10 830,136 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\program files\common files\system\ado\msado15.dll 2019-06-12 04:33.52 1,263,104 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\program files\common files\system\ole db\oledb32.dll 2019-03-19 07:44.53 931,840 add
Microsoft® Windows® Operating System 4.18.26080.4 Microsoft Corporation c:\programdata\microsoft\windows defender\platform\4.18.26080.4-0\mpoav.dll 2026-10-05 21:37.46 677,912 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcp47langs.dll 2019-03-19 07:44.15 369,504 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcp47mrm.dll 2019-03-19 07:44.15 186,672 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\bcryptprimitives.dll 2019-06-12 04:33.43 529,072 add
Microsoft® Windows® Operating System 5.0.1.1 Microsoft Corporation c:\windows\system32\cabinet.dll 2019-03-19 07:44.30 146,200 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cfgmgr32.dll 2019-03-19 07:44.35 293,344 add
Microsoft® Windows® Operating System 2001.12.10941.16384 Microsoft Corporation c:\windows\system32\clbcatq.dll 2019-03-19 07:44.30 643,752 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cldapi.dll 2019-03-19 07:44.28 105,984 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\coml2.dll 2019-03-19 07:44.15 477,240 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\coremessaging.dll 2019-03-19 07:44.30 859,632 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\coreuicomponents.dll 2019-03-19 07:44.09 3,323,336 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cryptbase.dll 2019-03-19 07:44.36 33,848 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cryptnet.dll 2019-03-19 07:44.33 168,448 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cryptsp.dll 2019-03-19 07:44.33 80,112 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cscapi.dll 2019-03-19 07:45.02 49,664 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\d3d10_1.dll 2019-03-19 07:44.47 179,200 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\d3d10_1core.dll 2019-03-19 07:44.47 37,376 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\d3d10warp.dll 2019-03-19 07:44.11 7,582,752 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\d3d11.dll 2019-03-19 07:44.11 2,466,296 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\d3dcompiler_47.dll 2019-03-19 07:44.11 4,474,880 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\dataexchange.dll 2019-03-19 07:44.03 222,208 add
Microsoft® Windows® Operating System 10.0.18362.145 Microsoft Corporation c:\windows\system32\dcomp.dll 2019-06-12 04:33.40 1,940,952 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\devrtl.dll 2019-03-19 07:44.35 59,904 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\dpapi.dll 2019-03-19 07:44.35 15,872 add
Microsoft® Windows® Operating System 0.3.18362.145 Microsoft Corporation c:\windows\system32\driverstore\filerepository\ntprint.inf_amd64_16f13144559407c0\amd64\mxdwdrv.dll 2019-06-12 04:33.34 871,424 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\dxcore.dll 2019-03-19 07:44.06 112,296 add
Microsoft® Windows® Operating System 10.0.18362.145 Microsoft Corporation c:\windows\system32\dxgi.dll 2019-06-12 04:33.38 939,504 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\gdi32.dll 2019-03-19 07:44.06 147,912 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\gdi32full.dll 2019-06-12 04:33.43 1,647,584 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\globinputhost.dll 2019-03-19 07:44.15 130,560 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\imm32.dll 2019-03-19 07:44.38 176,360 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\kernel.appcore.dll 2019-03-19 07:44.15 59,088 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\linkinfo.dll 2019-03-19 07:44.30 30,720 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msasn1.dll 2019-03-19 07:44.35 63,040 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\mscoree.dll 2019-03-19 07:46.09 378,368 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msdart.dll 2019-03-19 07:44.53 135,680 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\msimg32.dll 2019-06-12 04:33.43 8,192 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msvcp110_win.dll 2019-03-19 07:43.45 560,584 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msvcp_win.dll 2019-03-19 07:44.33 639,632 add
Microsoft® Windows® Operating System 7.0.18362.1 Microsoft Corporation c:\windows\system32\msvcrt.dll 2019-03-19 07:44.35 638,072 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ncryptsslp.dll 2019-03-19 07:44.35 134,280 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\netprofm.dll 2019-03-19 07:45.00 226,816 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\normaliz.dll 2019-03-19 07:44.38 5,632 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\npmproxy.dll 2019-03-19 07:45.00 45,056 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\nsi.dll 2019-03-19 07:44.36 25,000 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ntasn1.dll 2019-03-19 07:44.35 241,128 add
Microsoft® Windows® Operating System 10.0.18362.86 Microsoft Corporation c:\windows\system32\oleaut32.dll 2019-06-12 04:33.42 797,112 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ondemandconnroutehelper.dll 2019-03-19 07:44.00 73,216 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\onecorecommonproxystub.dll 2019-03-19 07:43.45 479,744 add
Microsoft® Windows® Operating System 10.0.18362.86 Microsoft Corporation c:\windows\system32\onecoreuapcommonproxystub.dll 2019-06-12 04:33.37 7,831,368 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\opcservices.dll 2019-03-19 07:45.02 2,177,536 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\photometadatahandler.dll 2019-03-19 07:44.11 491,520 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\policymanager.dll 2019-03-19 07:44.47 514,424 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\printworkflowproxy.dll 2019-03-19 07:45.00 26,112 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\profapi.dll 2019-03-19 07:44.36 110,280 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\rasadhlp.dll 2019-03-19 07:45.02 16,896 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\rmclient.dll 2019-03-19 07:44.15 157,536 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\rsaenh.dll 2019-03-19 07:44.35 202,440 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\sechost.dll 2019-03-19 07:44.36 606,104 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\secur32.dll 2019-03-19 07:45.00 27,648 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\srvcli.dll 2019-03-19 07:44.35 112,088 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\sspicli.dll 2019-03-19 07:44.36 179,944 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\textinputframework.dll 2019-03-19 07:44.11 642,216 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ucrtbase.dll 2019-03-19 07:44.33 1,020,776 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\usp10.dll 2019-03-19 07:44.38 79,360 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\version.dll 2019-03-19 07:45.05 30,680 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\win32u.dll 2019-06-12 04:33.39 127,064 add
Microsoft® Windows® Operating System 10.0.18362.86 Microsoft Corporation c:\windows\system32\windows.globalization.dll 2019-06-12 04:33.37 1,784,832 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.staterepositoryps.dll 2019-03-19 07:44.15 1,274,336 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windowscodecs.dll 2019-03-19 07:44.11 1,764,544 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\winnsi.dll 2019-03-19 07:44.36 34,808 add
Microsoft® Windows® Operating System 10.0.18362.53 Microsoft Corporation c:\windows\system32\winsta.dll 2019-06-12 04:33.42 358,944 add
Microsoft® Windows® Operating System 10.0.18362.145 Microsoft Corporation c:\windows\system32\wintrust.dll 2019-06-12 04:33.39 363,624 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wtsapi32.dll 2019-03-19 07:44.33 64,792 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\xmllite.dll 2019-03-19 07:44.38 211,216 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\xpsservices.dll 2019-03-19 07:45.00 2,861,568 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.175_none_17ae9e046da28e97\gdiplus.dll 2019-06-12 04:33.42 1,697,280 add
Natural Language Components 16.0.4266.1001 Microsoft Corporation c:\program files\microsoft office\office16\msproof7.dll 2015-07-31 09:57.12 317,608 add
umpdc.dll c:\windows\system32\umpdc.dll 2019-03-19 07:43.49 54,960 add
Visual Basic Environment 7.1.10.48 Microsoft Corporation c:\program files\common files\microsoft shared\vba\vba7.1\1033\vbe7intl.dll 2015-07-30 03:32.06 155,792 add
Visual Basic Environment 7.1.10.48 Microsoft Corporation c:\program files\common files\microsoft shared\vba\vba7.1\vbe7.dll 2015-07-29 20:49.42 4,378,760 add
Windows Installer - Unicode 5.0.18362.175 Microsoft Corporation c:\windows\system32\msi.dll 2019-06-12 04:33.52 4,577,280 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\advapi32.dll 2019-03-19 07:43.54 655,144 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\apphelp.dll 2019-03-19 07:44.28 564,736 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\appresolver.dll 2019-03-19 07:44.21 558,344 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcrypt.dll 2019-03-19 07:44.33 144,144 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\combase.dll 2019-06-12 04:33.42 3,373,256 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\crypt32.dll 2019-03-19 07:44.33 1,326,856 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\d2d1.dll 2019-03-19 07:44.11 6,066,808 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dhcpcsvc.dll 2019-03-19 07:44.33 92,672 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dhcpcsvc6.dll 2019-03-19 07:44.33 68,096 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dnsapi.dll 2019-03-19 07:44.33 818,888 add
Операционная система Microsoft® Windows® 0.3.18362.145 Microsoft Corporation c:\windows\system32\driverstore\filerepository\prnms003.inf_amd64_e4ff50d4d5f8b2aa\amd64\printconfig.dll 2019-06-12 04:33.34 3,548,672 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\dwmapi.dll 2019-03-19 07:44.30 162,392 add
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\dwrite.dll 2019-06-12 04:33.38 3,094,528 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\edputil.dll 2019-03-19 07:44.47 119,808 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\fltlib.dll 2019-03-19 07:44.36 32,520 add
Операционная система Microsoft® Windows® 10.0.18362.113 Microsoft Corporation c:\windows\system32\fwpuclnt.dll 2019-06-12 04:33.39 467,456 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\gpapi.dll 2019-03-19 07:44.48 129,808 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\hlink.dll 2019-03-19 07:44.50 128,000 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\iphlpapi.dll 2019-03-19 07:44.33 229,528 add
Операционная система Microsoft® Windows® 10.0.18362.86 Microsoft Corporation c:\windows\system32\kernel32.dll 2019-06-12 04:33.37 722,072 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\kernelbase.dll 2019-06-12 04:33.43 2,763,312 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\mlang.dll 2019-03-19 07:44.58 245,760 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\mpr.dll 2019-03-19 07:44.36 98,664 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\msctf.dll 2019-03-19 07:44.33 1,263,096 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\mskeyprotect.dll 2019-03-19 07:44.06 62,976 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\mswsock.dll 2019-03-19 07:44.33 407,544 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ncrypt.dll 2019-03-19 07:44.35 144,840 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\ntdll.dll 2019-06-12 04:33.42 1,999,440 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ntmarta.dll 2019-03-19 07:44.35 181,856 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ntshrui.dll 2019-03-19 07:44.30 497,664 add
Операционная система Microsoft® Windows® 10.0.18362.113 Microsoft Corporation c:\windows\system32\ole32.dll 2019-06-12 04:33.40 1,395,600 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\powrprof.dll 2019-03-19 07:44.35 291,336 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\prntvpt.dll 2019-03-19 07:45.00 176,640 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\rpcrt4.dll 2019-03-19 07:44.36 1,171,192 add
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\schannel.dll 2019-06-12 04:33.42 537,088 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\setupapi.dll 2019-03-19 07:45.00 4,683,784 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shcore.dll 2019-03-19 07:44.21 684,352 add
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\shell32.dll 2019-06-12 04:33.41 7,241,800 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\shlwapi.dll 2019-03-19 07:45.05 329,200 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\slc.dll 2019-03-19 07:44.32 140,800 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\sppc.dll 2019-03-19 07:44.32 136,192 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\srpapi.dll 2019-03-19 07:44.28 159,232 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\sxs.dll 2019-03-19 07:44.33 637,056 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\twinapi.appcore.dll 2019-03-19 07:44.04 2,473,984 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\twinapi.dll 2019-03-19 07:44.33 636,416 add
Операционная система Microsoft® Windows® 7.2.18362.1 Microsoft Corporation c:\windows\system32\uiautomationcore.dll 2019-03-19 07:44.03 2,521,600 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\user32.dll 2019-03-19 07:44.15 1,654,544 add
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\userenv.dll 2019-06-12 04:33.42 139,472 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\uxtheme.dll 2019-03-19 07:44.33 606,208 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\webio.dll 2019-03-19 07:44.35 598,016 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\webservices.dll 2019-03-19 07:44.15 1,379,248 add
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\windows.storage.dll 2019-06-12 04:33.39 7,887,656 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\winhttp.dll 2019-03-19 07:44.35 980,248 add
Операционная система Microsoft® Windows® 10.0.18362.175 Microsoft Corporation c:\windows\system32\winspool.drv 2019-06-12 04:33.35 539,136 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\wintypes.dll 2019-03-19 07:44.33 1,393,960 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ws2_32.dll 2019-03-19 07:44.36 443,424 add
Операционная система Microsoft® Windows® 6.10.18362.175 Microsoft Corporation c:\windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.175_none_e6c3ab1f131014c9\comctl32.dll 2019-06-12 04:33.44 2,624,824 add
Служба Windows® Search 7.0.18362.1 Microsoft Corporation c:\windows\system32\propsys.dll 2019-03-19 07:44.15 977,680 add
Running Processes\WINWORD.EXE /n "C:\Users\user\Desktop\lab1\src\GreyEnergyDropper.doc\Opened Handles\ add
File \Device\Afd add
File \Device\CNG add
File \Device\DeviceApi add
File \Device\KsecDD add
File \Device\Nsi add
Directory \KnownDlls add
Directory \Sessions\1\BaseNamedObjects add
File C:\Program Files\Common Files\microsoft shared\OFFICE16\MSO.DLL 2017-11-14 13:16.34 19,814,632 add
File C:\Program Files\Common Files\microsoft shared\VBA\VBA7.1\VBE7.DLL 2015-07-29 20:49.42 4,378,760 add
File C:\Program Files\Common Files\System\ado\ru-RU\msader15.dll.mui 2019-03-19 14:34.16 18,944 add
File C:\Program Files\Microsoft Office\Office16\MSWORD.OLB 2015-07-31 09:58.10 928,416 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\crypt32.dll.mui 2023-06-12 02:28.22 55,704 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\d2d1.dll.mui 2023-06-12 02:28.22 301,456 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\mswsock.dll.mui 2023-06-12 02:28.23 23,968 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\prntvpt.dll.mui 2023-06-12 02:28.24 27,040 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\propsys.dll.mui 2023-06-12 02:28.24 94,112 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\user32.dll.mui 2023-06-12 02:28.24 29,576 add
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\winnlsres.dll.mui 2023-06-12 02:28.24 78,240 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\286B77D5.wmf 2026-10-07 00:11.57 1,150 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\38B18769.wmf 2026-10-07 00:11.58 370 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\3D641624.wmf 2026-10-07 00:11.57 556 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\46EFDE01.dat 2026-10-07 00:11.51 996 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\47ED865F.wmf 2026-10-07 00:11.58 370 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\5228F308.wmf 2026-10-07 00:11.58 538 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\539F83FC.wmf 2026-10-07 00:11.58 370 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\5D4372DD.dat 2026-10-07 00:11.51 370 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\68881DE1.wmf 2026-10-07 00:11.58 884 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\69E0ACD4.wmf 2026-10-07 00:11.58 1,040 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\75CA2A6E.wmf 2026-10-07 00:11.58 902 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\7DE7AE02.wmf 2026-10-07 00:11.58 1,098 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\81F1C389.dat 2026-10-07 00:11.51 1,156 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\85E94779.dat 2026-10-07 00:11.51 608 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\8669653E.wmf 2026-10-07 00:11.58 960 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9300F3D2.wmf 2026-10-07 00:11.57 1,132 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9749D3B0.wmf 2026-10-07 00:11.57 1,152 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9F03FD60.wmf 2026-10-07 00:11.58 1,056 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\A6411811.dat 2026-10-07 00:11.51 534 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\A739C5ED.dat 2026-10-07 00:11.51 1,150 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\A7B40DAB.wmf 2026-10-07 00:11.57 1,156 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\AF6176A.wmf 2026-10-07 00:11.58 370 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\AF7350B7.dat 2026-10-07 00:11.51 370 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\B14C1BCD.wmf 2026-10-07 00:11.58 370 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\B24AA21B.wmf 2026-10-07 00:11.58 1,054 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\B4BED827.wmf 2026-10-07 00:11.58 996 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\BE4110EF.wmf 2026-10-07 00:11.57 534 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\BF363B83.dat 2026-10-07 00:11.51 1,132 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\BFF0B77F.dat 2026-10-07 00:11.51 1,152 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C4BC2CE5.dat 2026-10-07 00:11.51 1,240 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C547DFF1.wmf 2026-10-07 00:11.58 1,240 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C5F93EC5.wmf 2026-10-07 00:11.58 1,044 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\CA3FA5F3.dat 2026-10-07 00:11.51 370 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\D638B656.wmf 2026-10-07 00:11.58 370 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\E52D6C63.wmf 2026-10-07 00:11.58 608 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\E58D553B.dat 2026-10-07 00:11.51 960 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\F0706547.dat 2026-10-07 00:11.51 556 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\mso30C0.tmp 2026-10-07 00:11.52 0 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRF{A2A60E53-1E51-4BD0-8F18-A94B07E2EAD3}.tmp 2026-10-07 00:11.58 180,224 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{18EDFA00-875D-474B-8957-4AE887A0F48E}.tmp 2026-10-07 00:11.51 0 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{30CEC800-7D86-4795-8B98-022F42DC2989}.tmp 2026-10-07 00:11.51 0 add
File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{57E42AD2-6488-4DAC-A9A9-10636C33C626}.tmp 2026-10-07 00:11.51 0 add
File C:\Users\user\AppData\Local\Temp\Word8.0\MSForms.exd 2026-10-07 00:11.57 171,496 add
File C:\Users\user\AppData\Roaming\Microsoft\Шаблоны\Normal.dotm 2026-10-06 02:50.37 18,162 add
File C:\Users\user\Desktop\lab1\src\GreyEnergyDropper.doc 2026-10-05 21:59.42 990,671 add
Directory C:\Users\user\Documents add
Directory C:\Windows\Fonts add
File C:\Windows\Fonts\arialbd.ttf 2019-03-19 07:44.09 980,756 add
File C:\Windows\Fonts\calibri.ttf 2019-03-19 07:44.09 1,648,120 add
File C:\Windows\Fonts\segoeui.ttf 2019-03-19 07:44.11 955,804 add
File C:\Windows\Fonts\segoeuib.ttf 2019-03-19 07:44.11 951,724 add
File C:\Windows\Fonts\StaticCache.dat 2019-06-12 04:33.43 19,333,120 add
File C:\Windows\Fonts\times.ttf 2019-03-19 07:44.11 1,195,688 add
File C:\Windows\Fonts\timesbd.ttf 2019-03-19 07:44.11 1,175,904 add
File C:\Windows\Fonts\timesbi.ttf 2019-03-19 07:44.11 881,860 add
File C:\Windows\Fonts\timesi.ttf 2019-03-19 07:44.11 940,288 add
File C:\Windows\Registration\R000000000006.clb 2023-06-12 00:13.07 27,356 add
File C:\Windows\System32\DriverStore\FileRepository\prnms003.inf_amd64_e4ff50d4d5f8b2aa\Amd64\PrintConfig.dll 2019-06-12 04:33.34 3,548,672 add
File C:\Windows\System32\FM20.DLL 2015-07-31 09:57.08 1,646,248 add
File C:\Windows\System32\msxml6.dll 2019-06-12 04:33.38 2,449,456 add
File C:\Windows\System32\ru-RU\KernelBase.dll.mui 2019-03-19 14:34.31 1,342,464 add
File C:\Windows\System32\spool\V4Dirs\2A06D6F8-D7A5-4B5C-88AC-FCFE2E4F2C88\69b8a4a.BUD 2023-06-11 22:42.17 15,392 add
File C:\Windows\System32\stdole2.tlb 2019-03-19 07:43.45 18,432 add
Directory C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.175_none_e6c3ab1f131014c9 add
Directory C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.175_none_17ae9e046da28e97 add
Key HKLM add
Key HKLM\SOFTWARE add
Key HKLM\SOFTWARE\Classes\PackagedCom add
Key HKLM\SOFTWARE\Classes\PackagedCom\ClassIndex add
Key HKLM\SOFTWARE\Classes\PROTOCOLS\Filter\text/xml add
Key HKLM\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config add
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\CA add
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed add
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Root add
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Trust add
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople add
Key HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl add
Key HKLM\SOFTWARE\Microsoft\Office add
Key HKLM\SOFTWARE\Microsoft\Ole add
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot add
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate add
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\CA add
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\Disallowed add
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\ROOT add
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot add
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\trust add
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople add
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2112AB0A-C86A-4ffe-A368-0DE96E47012E}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2400183A-6185-49FB-A2D8-4A392A602BA3}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{24D89E24-2F19-4534-9DDE-6A6671FBB8FE}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2B20DF75-1EDA-4039-8097-38798227D5B7}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{339719B5-8C47-4894-94C2-D8F77ADD44A6}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{33E28130-4E1E-4676-835A-98395C3BC3BB}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{374DE290-123F-4565-9164-39C4925E467B}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{491E922F-5643-4af4-A7EB-4E7A138D8174}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{4BD8D571-6D19-48D3-BE97-422220080E43}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52528A6B-B9E3-4add-B60D-588C2DBA842D}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{56784854-C6CB-462B-8169-88E350ACB882}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{767E6811-49CB-4273-87C2-20F355E1085B}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7b0db17d-9cd2-4a93-9733-46cc89022e7c}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9B74B6A3-0DFD-4f11-9E78-5F7800F2E772}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A302545D-DEFF-464b-ABE8-61C8648D939B}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A990AE9F-A03B-4e80-94BC-9912D7504104}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C3F2459E-80D6-45DC-BFEF-1F769F2BE730}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{E25B5812-BE88-4bd9-94B0-29233477B6C3}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f3ce0f7c-4901-4acc-8648-d5d44b04ef8f}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SyncRootManager add
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId add
Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\Server add
Key HKLM\SOFTWARE\Policies add
Key HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates add
Key HKLM\SOFTWARE\WOW6432Node add
Key HKLM\SYSTEM\ControlSet001\Control\NetworkProvider\HwOrder add
Key HKLM\SYSTEM\ControlSet001\Control\NetworkProvider\ProviderOrder add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\CodePage add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\CustomLocale add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids add
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions add
Key HKLM\SYSTEM\ControlSet001\Control\Session Manager add
Key HKLM\SYSTEM\ControlSet001\Control\Session Manager\Environment add
Key HKLM\SYSTEM\ControlSet001\Services\crypt32 add
Key HKLM\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces add
Key HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces add
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 add
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 add
Key HKU add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001 add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Environment add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\EUDC add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\General add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\Internet add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\LanguageResources add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\Roaming add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\ServicesManagerCache add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\Toolbars add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Registration add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\File MRU add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\File MRU\Change add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\Options add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\Place MRU add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\Place MRU\Change add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\Security add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\Security\Trusted Documents add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\Security\Trusted Locations add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\Common add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\OneDrive add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\CA add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\Disallowed add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\Root add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\SmartCardRoot add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\trust add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\TrustedPeople add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Policies add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Policies\Microsoft\SystemCertificates add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings add
Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft add
Running Processes\WINWORD.EXE /n "C:\Users\user\Desktop\lab1\src\GreyEnergyDropper.doc\Opened Ports\ add
TCP 10.0.2.15 49712 52.110.0.12 443 ESTABLISHED add
TCP 10.0.2.15 49714 2.16.6.160 443 ESTABLISHED add
TCP 10.0.2.15 49715 2.16.153.40 443 ESTABLISHED add
TCP 10.0.2.15 49716 2.16.153.40 443 ESTABLISHED add
TCP 10.0.2.15 49717 2.16.153.40 443 ESTABLISHED add
TCP 10.0.2.15 49718 2.16.153.40 443 ESTABLISHED add
TCP 10.0.2.15 49719 2.16.153.40 443 ESTABLISHED add
TCP 10.0.2.15 49720 2.16.153.40 443 ESTABLISHED add
TCP 10.0.2.15 49721 2.16.153.40 443 ESTABLISHED add
TCP 10.0.2.15 49722 2.16.153.40 443 ESTABLISHED add
TCP 10.0.2.15 49723 2.18.121.69 443 ESTABLISHED add
TCP 10.0.2.15 49724 2.18.121.69 443 ESTABLISHED add
TCP 10.0.2.15 49725 2.18.121.69 443 ESTABLISHED add
TCP 10.0.2.15 49726 2.18.121.69 443 ESTABLISHED add
TCP 10.0.2.15 49727 2.18.121.69 443 ESTABLISHED add
TCP 10.0.2.15 49728 2.18.121.69 443 ESTABLISHED add
TCP 10.0.2.15 49729 2.18.121.69 443 ESTABLISHED add
TCP 10.0.2.15 49730 2.18.121.69 443 ESTABLISHED add
TCP 10.0.2.15 49731 2.18.121.69 443 ESTABLISHED add
TCP 10.0.2.15 49732 2.18.121.69 443 ESTABLISHED add
TCP 10.0.2.15 49733 2.18.121.69 443 ESTABLISHED add
TCP 10.0.2.15 49734 2.18.121.69 443 ESTABLISHED add
TCP 10.0.2.15 49735 2.18.121.69 443 ESTABLISHED add
TCP 10.0.2.15 49736 2.18.121.69 443 ESTABLISHED add
TCP 10.0.2.15 49737 2.16.153.40 443 ESTABLISHED add
TCP 10.0.2.15 49738 2.16.153.40 443 ESTABLISHED add
TCP 10.0.2.15 49739 2.16.153.40 443 ESTABLISHED add
TCP 10.0.2.15 49740 2.16.153.40 443 ESTABLISHED add
TCP 10.0.2.15 49741 2.16.153.40 443 ESTABLISHED add
TCP 10.0.2.15 49742 2.16.153.40 443 ESTABLISHED add
TCP 10.0.2.15 49743 2.16.153.40 443 ESTABLISHED add
TCP 10.0.2.15 49744 2.16.153.40 443 ESTABLISHED add
TCP 10.0.2.15 49745 2.16.153.40 443 ESTABLISHED add
TCP 10.0.2.15 49746 2.18.121.69 443 ESTABLISHED add
TCP 10.0.2.15 49747 2.18.121.69 443 ESTABLISHED add
TCP 10.0.2.15 49748 2.16.153.40 443 ESTABLISHED add
TCP 10.0.2.15 49749 2.16.153.40 443 ESTABLISHED add
TCP 10.0.2.15 49750 2.18.121.69 443 ESTABLISHED add
TCP 10.0.2.15 49751 2.18.121.69 443 ESTABLISHED add
Running Processes\wmiprvse.exe\Opened Handles\ mod
Directory C:\Windows\System32 old
Directory C:\Windows\System32 new
Running Processes\wmiprvse.exe\ del
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\bcryptprimitives.dll 2019-06-12 04:33.43 529,072 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\cfgmgr32.dll 2019-03-19 07:44.35 293,344 del
Microsoft® Windows® Operating System 2001.12.10941.16384 Microsoft Corporation c:\windows\system32\clbcatq.dll 2019-03-19 07:44.30 643,752 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\devobj.dll 2019-03-19 07:44.35 158,592 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\framedynos.dll 2019-03-19 07:43.54 305,664 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\gdi32.dll 2019-03-19 07:44.06 147,912 del
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\gdi32full.dll 2019-06-12 04:33.43 1,647,584 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\imagehlp.dll 2019-03-19 07:44.35 108,936 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\kernel.appcore.dll 2019-03-19 07:44.15 59,088 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msasn1.dll 2019-03-19 07:44.35 63,040 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msvcp_win.dll 2019-03-19 07:44.33 639,632 del
Microsoft® Windows® Operating System 7.0.18362.1 Microsoft Corporation c:\windows\system32\msvcrt.dll 2019-03-19 07:44.35 638,072 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ncobjapi.dll 2019-03-19 07:43.54 73,728 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ntasn1.dll 2019-03-19 07:44.35 241,128 del
Microsoft® Windows® Operating System 10.0.18362.86 Microsoft Corporation c:\windows\system32\oleaut32.dll 2019-06-12 04:33.42 797,112 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\sechost.dll 2019-03-19 07:44.36 606,104 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\sspicli.dll 2019-03-19 07:44.36 179,944 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\tbs.dll 2019-03-19 07:43.54 48,048 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ucrtbase.dll 2019-03-19 07:44.33 1,020,776 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wbem\fastprox.dll 2019-03-19 07:43.54 1,031,680 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wbem\wbemprox.dll 2019-03-19 07:43.54 44,544 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wbem\wbemsvc.dll 2019-03-19 07:43.54 63,488 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wbem\win32_tpm.dll 2019-03-19 07:43.54 79,360 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wbemcomn.dll 2019-03-19 07:43.54 487,424 del
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\win32u.dll 2019-06-12 04:33.39 127,064 del
Microsoft® Windows® Operating System 10.0.18362.53 Microsoft Corporation c:\windows\system32\winsta.dll 2019-06-12 04:33.42 358,944 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wtsapi32.dll 2019-03-19 07:44.33 64,792 del
umpdc.dll c:\windows\system32\umpdc.dll 2019-03-19 07:43.49 54,960 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\advapi32.dll 2019-03-19 07:43.54 655,144 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcrypt.dll 2019-03-19 07:44.33 144,144 del
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\combase.dll 2019-06-12 04:33.42 3,373,256 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\crypt32.dll 2019-03-19 07:44.33 1,326,856 del
Операционная система Microsoft® Windows® 10.0.18362.86 Microsoft Corporation c:\windows\system32\kernel32.dll 2019-06-12 04:33.37 722,072 del
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\kernelbase.dll 2019-06-12 04:33.43 2,763,312 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ncrypt.dll 2019-03-19 07:44.35 144,840 del
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\ntdll.dll 2019-06-12 04:33.42 1,999,440 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\powrprof.dll 2019-03-19 07:44.35 291,336 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\rpcrt4.dll 2019-03-19 07:44.36 1,171,192 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\tpmcoreprovisioning.dll 2019-03-19 07:43.54 1,092,096 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\user32.dll 2019-03-19 07:44.15 1,654,544 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\wbem\cimwin32.dll 2019-03-19 07:44.00 2,054,144 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\wbem\wmiutils.dll 2019-03-19 07:43.54 131,584 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\winhttp.dll 2019-03-19 07:44.35 980,248 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\ws2_32.dll 2019-03-19 07:44.36 443,424 del
Running Processes\wmiprvse.exe\Opened Handles\ del
Directory \BaseNamedObjects del
File \Device\CNG del
File \Device\DeviceApi del
File \Device\KsecDD del
Directory \KnownDlls del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\user32.dll.mui 2023-06-12 02:28.24 29,576 del
File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\wbem\ru-RU\cimwin32.dll.mui 2023-06-12 02:28.25 20,888 del
File C:\Windows\Registration\R000000000006.clb 2023-06-12 00:13.07 27,356 del
Directory C:\Windows\System32 del
Key HKLM del
Key HKLM\SOFTWARE\Classes del
Key HKLM\SOFTWARE\Microsoft\Ole del
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options del
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids del
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions del
Key HKLM\SYSTEM\ControlSet001\Control\Session Manager del
Loaded Dlls\ mod
Microsoft Office 2016 16.0.4618.1000 Microsoft Corporation c:\program files\common files\microsoft shared\office16\mso.dll 2017-11-14 13:16.34 19,814,632 add
Microsoft Office 2016 16.0.4591.1000 Microsoft Corporation c:\program files\common files\microsoft shared\office16\mso20win32client.dll 2017-11-14 13:16.34 3,161,344 add
Microsoft Office 2016 16.0.4618.1000 Microsoft Corporation c:\program files\common files\microsoft shared\office16\mso30win32client.dll 2017-11-14 13:16.34 4,766,952 add
Microsoft Office 2016 16.0.4627.1000 Microsoft Corporation c:\program files\common files\microsoft shared\office16\mso40uiwin32client.dll 2017-11-15 15:27.44 9,352,424 add
Microsoft Office 2016 16.0.4618.1000 Microsoft Corporation c:\program files\common files\microsoft shared\office16\mso99lwin32client.dll 2017-11-14 13:16.34 8,157,416 add
Microsoft Office 2016 16.0.4266.1001 Microsoft Corporation c:\program files\common files\microsoft shared\office16\msptls.dll 2015-07-31 09:57.10 1,499,840 add
Microsoft Office 2016 16.0.4266.1001 Microsoft Corporation c:\program files\common files\microsoft shared\office16\riched20.dll 2015-07-31 09:57.10 2,234,536 add
Microsoft Office 2016 16.0.4266.1001 Microsoft Corporation c:\program files\common files\microsoft shared\proof\mslid.dll 2015-07-31 09:57.10 553,648 add
Microsoft Office 2016 16.0.4266.1001 Microsoft Corporation c:\program files\microsoft office\office16\chart.dll 2015-07-31 09:57.10 11,483,832 add
Microsoft Office 2016 16.0.4266.1001 Microsoft Corporation c:\program files\microsoft office\office16\oart.dll 2015-07-31 09:57.10 18,238,120 add
Microsoft Office 2016 16.0.4627.1000 Microsoft Corporation c:\program files\microsoft office\office16\wwlib.dll 2017-11-15 15:35.08 37,183,656 add
Microsoft Office InfoPath 16.0.4266.1001 Microsoft Corporation c:\program files\common files\microsoft shared\office16\msoxmlmf.dll 2015-07-31 09:57.12 65,736 add
Microsoft Office Template and Media Control 15.0.4420.0 Microsoft Corporation c:\program files\microsoft office\office16\ieawsdc.dll 2015-07-31 09:57.12 293,032 add
Microsoft Visual Basic for Applications 7.1.16.4266 Microsoft Corporation c:\program files\common files\microsoft shared\vba\vba7.1\vbeui.dll 2015-07-31 09:57.10 2,624,744 add
Microsoft XML Core Services 8.110.18362.175 Microsoft Corporation c:\windows\system32\msxml3.dll 2019-06-12 04:33.44 1,697,792 add
Microsoft ® JScript 5.812.10240.16384 Microsoft Corporation c:\windows\system32\jscript.dll 2019-06-12 04:33.51 840,192 add
Microsoft ® Script Runtime 5.812.10240.16384 Microsoft Corporation c:\windows\system32\scrrun.dll 2019-03-19 07:45.02 221,184 add
Microsoft ® Windows Script Host Runtime Library 5.812.10240.16384 Microsoft Corporation c:\windows\system32\wshom.ocx 2019-03-19 07:45.02 142,848 add
Microsoft® .NET Framework 4.8.4180.0 Microsoft Corporation c:\windows\microsoft.net\framework64\v4.0.30319\mscoreei.dll 2020-03-27 02:10.19 689,952 add
Microsoft® Forms 16.0.4266.1001 Microsoft Corporation c:\windows\system32\fm20.dll 2015-07-31 09:57.08 1,646,248 add
Microsoft® Forms 16.0.4266.1001 Microsoft Corporation c:\windows\system32\fm20enu.dll 2015-07-31 10:01.26 31,944 add
Microsoft® Visual Studio® 14.32.31332.0 Microsoft Corporation c:\windows\system32\msvcp140.dll 2022-06-10 19:52.30 571,312 add
Microsoft® Visual Studio® 14.32.31332.0 Microsoft Corporation c:\windows\system32\vcruntime140_1.dll 2022-06-10 19:52.30 38,304 add
Microsoft® Visual Studio® 2010 10.0.40219.1 Microsoft Corporation c:\windows\system32\msvcr100.dll 2015-07-31 09:57.10 830,136 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\program files\common files\system\ado\msado15.dll 2019-06-12 04:33.52 1,263,104 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\program files\common files\system\ole db\oledb32.dll 2019-03-19 07:44.53 931,840 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\immersivecontrolpanel\systemsettings.dll 2019-03-19 07:46.39 7,061,504 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\immersivecontrolpanel\systemsettingsviewmodel.desktop.dll 2019-03-19 07:46.39 964,096 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\immersivecontrolpanel\telemetry.common.dll 2019-03-19 07:46.39 55,296 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\bcastdvr.proxy.dll 2019-03-19 07:44.01 261,120 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\capabilityaccesshandlers.dll 2019-03-19 07:44.06 65,024 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\credui.dll 2019-03-19 07:44.46 49,152 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\d3d10_1.dll 2019-03-19 07:44.47 179,200 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\d3d10_1core.dll 2019-03-19 07:44.47 37,376 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\devrtl.dll 2019-03-19 07:44.35 59,904 add
Microsoft® Windows® Operating System 0.3.18362.145 Microsoft Corporation c:\windows\system32\driverstore\filerepository\ntprint.inf_amd64_16f13144559407c0\amd64\mxdwdrv.dll 2019-06-12 04:33.34 871,424 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\efsutil.dll 2019-03-19 07:44.47 45,056 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\errordetailscore.dll 2019-03-19 07:44.04 46,592 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\fhsvcctl.dll 2019-03-19 07:45.54 29,696 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\keepaliveprovider.dll 2019-03-19 07:44.15 70,656 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ksuser.dll 2019-03-19 07:43.47 23,264 add
Microsoft® Windows® Operating System 10.0.18362.175 Microsoft Corporation c:\windows\system32\mfcore.dll 2019-06-12 04:33.57 4,128,904 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\mscoree.dll 2019-03-19 07:46.09 378,368 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\msdart.dll 2019-03-19 07:44.53 135,680 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\ncaapi.dll 2019-03-19 07:44.47 25,600 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\normaliz.dll 2019-03-19 07:44.38 5,632 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\printworkflowproxy.dll 2019-03-19 07:45.00 26,112 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\settingshandlers_nt.dll 2019-03-19 07:45.00 3,748,864 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\settingshandlers_user.dll 2019-03-19 07:44.23 593,920 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\shacct.dll 2019-03-19 07:44.28 140,288 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\shgina.dll 2019-03-19 07:44.48 28,672 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\userdatatimeutil.dll 2019-03-19 07:44.15 121,344 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\usp10.dll 2019-03-19 07:44.38 79,360 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wbem\win32_tpm.dll 2019-03-19 07:43.54 79,360 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wcmapi.dll 2019-03-19 07:43.54 140,288 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.networking.hostname.dll 2019-03-19 07:44.00 210,432 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.networking.sockets.pushenabledapplication.dll 2019-03-19 07:44.01 148,480 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.ui.xaml.phone.dll 2019-03-19 07:44.01 1,233,920 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\windowsinternal.composableshell.desktophosting.dll 2019-03-19 07:44.25 191,488 del
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\wmi.dll 2019-03-19 07:44.36 5,632 add
Microsoft® Windows® Operating System 10.0.18362.1 Microsoft Corporation c:\windows\system32\xpsservices.dll 2019-03-19 07:45.00 2,861,568 add
Natural Language Components 16.0.4266.1001 Microsoft Corporation c:\program files\microsoft office\office16\msproof7.dll 2015-07-31 09:57.12 317,608 add
Visual Basic Environment 7.1.10.48 Microsoft Corporation c:\program files\common files\microsoft shared\vba\vba7.1\1033\vbe7intl.dll 2015-07-30 03:32.06 155,792 add
Visual Basic Environment 7.1.10.48 Microsoft Corporation c:\program files\common files\microsoft shared\vba\vba7.1\vbe7.dll 2015-07-29 20:49.42 4,378,760 add
Windows Installer - Unicode 5.0.18362.1 Microsoft Corporation c:\windows\system32\msiltcfg.dll 2019-03-19 07:45.45 21,504 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\credprovhost.dll 2019-03-19 07:44.45 386,560 add
Операционная система Microsoft® Windows® 0.3.18362.145 Microsoft Corporation c:\windows\system32\driverstore\filerepository\prnms003.inf_amd64_e4ff50d4d5f8b2aa\amd64\printconfig.dll 2019-06-12 04:33.34 3,548,672 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\fhcfg.dll 2019-03-19 07:45.54 430,080 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\fhsettingsprovider.dll 2019-03-19 07:45.54 441,344 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\hlink.dll 2019-03-19 07:44.50 128,000 add
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\miracastreceiver.dll 2019-06-12 04:33.37 1,333,248 add
Операционная система Microsoft® Windows® 2008.0.18362.1 Microsoft Corporation c:\windows\system32\offfilt.dll 2019-03-19 07:45.02 270,336 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\onebackuphandler.dll 2019-03-19 07:45.54 359,936 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\playtodevice.dll 2019-03-19 07:45.35 392,192 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\printworkflowservice.dll 2019-03-19 07:45.00 178,688 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\prntvpt.dll 2019-03-19 07:45.00 176,640 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\provsvc.dll 2019-03-19 07:45.56 468,480 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\query.dll 2019-03-19 07:44.11 105,472 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\sdengin2.dll 2019-03-19 07:45.34 1,193,472 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\spp.dll 2019-03-19 07:45.34 272,384 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\tpmcoreprovisioning.dll 2019-03-19 07:43.54 1,092,096 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\usercpl.dll 2019-03-19 07:43.57 745,984 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\wbem\cimwin32.dll 2019-03-19 07:44.00 2,054,144 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\windows.ui.appdefaults.dll 2019-03-19 07:43.57 265,728 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\winlangdb.dll 2019-03-19 07:44.15 199,168 add
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\wlidsvc.dll 2019-03-19 07:44.03 2,157,568 del
Операционная система Microsoft® Windows® 10.0.18362.1 Microsoft Corporation c:\windows\system32\wpdshext.dll 2019-03-19 14:36.59 614,912 del
Операционная система Microsoft® Windows® 10.0.18362.145 Microsoft Corporation c:\windows\system32\wpnprv.dll 2019-06-12 04:33.39 562,176 add
Opened Handles\ mod
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File \Device\Afd add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File \Device\CNG add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File \Device\DeviceApi add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File \Device\KsecDD add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File \Device\Nsi add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Directory \KnownDlls add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Directory \Sessions\1\BaseNamedObjects add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Program Files\Common Files\microsoft shared\OFFICE16\MSO.DLL 2017-11-14 13:16.34 19,814,632 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Program Files\Common Files\microsoft shared\VBA\VBA7.1\VBE7.DLL 2015-07-29 20:49.42 4,378,760 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Program Files\Common Files\System\ado\ru-RU\msader15.dll.mui 2019-03-19 14:34.16 18,944 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Program Files\Microsoft Office\Office16\MSWORD.OLB 2015-07-31 09:58.10 928,416 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\crypt32.dll.mui 2023-06-12 02:28.22 55,704 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\d2d1.dll.mui 2023-06-12 02:28.22 301,456 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\mswsock.dll.mui 2023-06-12 02:28.23 23,968 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\prntvpt.dll.mui 2023-06-12 02:28.24 27,040 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\propsys.dll.mui 2023-06-12 02:28.24 94,112 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\user32.dll.mui 2023-06-12 02:28.24 29,576 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\winnlsres.dll.mui 2023-06-12 02:28.24 78,240 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\286B77D5.wmf 2026-10-07 00:11.57 1,150 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\38B18769.wmf 2026-10-07 00:11.58 370 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\3D641624.wmf 2026-10-07 00:11.57 556 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\46EFDE01.dat 2026-10-07 00:11.51 996 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\47ED865F.wmf 2026-10-07 00:11.58 370 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\5228F308.wmf 2026-10-07 00:11.58 538 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\539F83FC.wmf 2026-10-07 00:11.58 370 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\5D4372DD.dat 2026-10-07 00:11.51 370 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\68881DE1.wmf 2026-10-07 00:11.58 884 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\69E0ACD4.wmf 2026-10-07 00:11.58 1,040 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\75CA2A6E.wmf 2026-10-07 00:11.58 902 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\7DE7AE02.wmf 2026-10-07 00:11.58 1,098 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\81F1C389.dat 2026-10-07 00:11.51 1,156 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\85E94779.dat 2026-10-07 00:11.51 608 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\8669653E.wmf 2026-10-07 00:11.58 960 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9300F3D2.wmf 2026-10-07 00:11.57 1,132 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9749D3B0.wmf 2026-10-07 00:11.57 1,152 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9F03FD60.wmf 2026-10-07 00:11.58 1,056 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\A6411811.dat 2026-10-07 00:11.51 534 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\A739C5ED.dat 2026-10-07 00:11.51 1,150 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\A7B40DAB.wmf 2026-10-07 00:11.57 1,156 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\AF6176A.wmf 2026-10-07 00:11.58 370 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\AF7350B7.dat 2026-10-07 00:11.51 370 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\B14C1BCD.wmf 2026-10-07 00:11.58 370 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\B24AA21B.wmf 2026-10-07 00:11.58 1,054 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\B4BED827.wmf 2026-10-07 00:11.58 996 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\BE4110EF.wmf 2026-10-07 00:11.57 534 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\BF363B83.dat 2026-10-07 00:11.51 1,132 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\BFF0B77F.dat 2026-10-07 00:11.51 1,152 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C4BC2CE5.dat 2026-10-07 00:11.51 1,240 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C547DFF1.wmf 2026-10-07 00:11.58 1,240 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C5F93EC5.wmf 2026-10-07 00:11.58 1,044 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\CA3FA5F3.dat 2026-10-07 00:11.51 370 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\D638B656.wmf 2026-10-07 00:11.58 370 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\E52D6C63.wmf 2026-10-07 00:11.58 608 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\E58D553B.dat 2026-10-07 00:11.51 960 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\F0706547.dat 2026-10-07 00:11.51 556 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\mso30C0.tmp 2026-10-07 00:11.52 9,084 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRF{A2A60E53-1E51-4BD0-8F18-A94B07E2EAD3}.tmp 2026-10-07 00:11.58 180,224 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{18EDFA00-875D-474B-8957-4AE887A0F48E}.tmp 2026-10-07 00:11.51 0 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{30CEC800-7D86-4795-8B98-022F42DC2989}.tmp 2026-10-07 00:11.51 1,024 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{57E42AD2-6488-4DAC-A9A9-10636C33C626}.tmp 2026-10-07 00:11.51 23,552 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Local\Temp\Word8.0\MSForms.exd 2026-10-07 00:11.57 171,496 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\AppData\Roaming\Microsoft\Шаблоны\Normal.dotm 2026-10-06 02:50.37 18,162 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Users\user\Desktop\lab1\src\GreyEnergyDropper.doc 2026-10-05 21:59.42 990,671 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Directory C:\Users\user\Documents add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Directory C:\Windows\Fonts add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Windows\Fonts\arialbd.ttf 2019-03-19 07:44.09 980,756 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Windows\Fonts\calibri.ttf 2019-03-19 07:44.09 1,648,120 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Windows\Fonts\segoeui.ttf 2019-03-19 07:44.11 955,804 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Windows\Fonts\segoeuib.ttf 2019-03-19 07:44.11 951,724 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Windows\Fonts\StaticCache.dat 2019-06-12 04:33.43 19,333,120 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Windows\Fonts\times.ttf 2019-03-19 07:44.11 1,195,688 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Windows\Fonts\timesbd.ttf 2019-03-19 07:44.11 1,175,904 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Windows\Fonts\timesbi.ttf 2019-03-19 07:44.11 881,860 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Windows\Fonts\timesi.ttf 2019-03-19 07:44.11 940,288 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Windows\Registration\R000000000006.clb 2023-06-12 00:13.07 27,356 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Windows\System32\DriverStore\FileRepository\prnms003.inf_amd64_e4ff50d4d5f8b2aa\Amd64\PrintConfig.dll 2019-06-12 04:33.34 3,548,672 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Windows\System32\FM20.DLL 2015-07-31 09:57.08 1,646,248 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Windows\System32\msxml6.dll 2019-06-12 04:33.38 2,449,456 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Windows\System32\ru-RU\KernelBase.dll.mui 2019-03-19 14:34.31 1,342,464 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Windows\System32\spool\V4Dirs\2A06D6F8-D7A5-4B5C-88AC-FCFE2E4F2C88\69b8a4a.BUD 2023-06-11 22:42.17 15,392 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE File C:\Windows\System32\stdole2.tlb 2019-03-19 07:43.45 18,432 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Directory C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.175_none_e6c3ab1f131014c9 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Directory C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.175_none_17ae9e046da28e97 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Classes\PackagedCom add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Classes\PackagedCom\ClassIndex add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Classes\PROTOCOLS\Filter\text/xml add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\CA add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Root add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Trust add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Office add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Ole add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\SystemCertificates\CA add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\SystemCertificates\Disallowed add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\SystemCertificates\ROOT add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\SystemCertificates\trust add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2112AB0A-C86A-4ffe-A368-0DE96E47012E}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2400183A-6185-49FB-A2D8-4A392A602BA3}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{24D89E24-2F19-4534-9DDE-6A6671FBB8FE}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2B20DF75-1EDA-4039-8097-38798227D5B7}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{339719B5-8C47-4894-94C2-D8F77ADD44A6}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{33E28130-4E1E-4676-835A-98395C3BC3BB}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{374DE290-123F-4565-9164-39C4925E467B}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{491E922F-5643-4af4-A7EB-4E7A138D8174}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{4BD8D571-6D19-48D3-BE97-422220080E43}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52528A6B-B9E3-4add-B60D-588C2DBA842D}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{56784854-C6CB-462B-8169-88E350ACB882}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{767E6811-49CB-4273-87C2-20F355E1085B}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7b0db17d-9cd2-4a93-9733-46cc89022e7c}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9B74B6A3-0DFD-4f11-9E78-5F7800F2E772}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A302545D-DEFF-464b-ABE8-61C8648D939B}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A990AE9F-A03B-4e80-94BC-9912D7504104}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C3F2459E-80D6-45DC-BFEF-1F769F2BE730}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{E25B5812-BE88-4bd9-94B0-29233477B6C3}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f3ce0f7c-4901-4acc-8648-d5d44b04ef8f}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SyncRootManager add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\WindowsRuntime add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\Server add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Policies add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SOFTWARE\WOW6432Node add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SYSTEM\ControlSet001\Control\NetworkProvider\HwOrder add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SYSTEM\ControlSet001\Control\NetworkProvider\ProviderOrder add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SYSTEM\ControlSet001\Control\Nls\CodePage add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SYSTEM\ControlSet001\Control\Nls\CustomLocale add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SYSTEM\ControlSet001\Control\Session Manager add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SYSTEM\ControlSet001\Control\Session Manager\Environment add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SYSTEM\ControlSet001\Services\crypt32 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SYSTEM\ControlSet001\Services\Tcpip6\Parameters\Interfaces add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001 add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Environment add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\EUDC add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\General add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\Internet add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\LanguageResources add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\Roaming add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\ServicesManagerCache add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\Toolbars add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Registration add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\File MRU add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\File MRU\Change add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\Options add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\Place MRU add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\Place MRU\Change add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\Security add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\Security\Trusted Documents add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\Security\Trusted Locations add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\Common add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\OneDrive add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\CA add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\Disallowed add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\Root add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\SmartCardRoot add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\trust add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\SystemCertificates\TrustedPeople add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Policies add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Policies\Microsoft\SystemCertificates add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft add
Microsoft® Windows® Operating System C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\DefenderSessionHelper.exe Directory C:\Windows\System32 old
Microsoft® Windows® Operating System C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\DefenderSessionHelper.exe Directory C:\Windows\System32 new
Microsoft® Windows® Operating System C:\Windows\system32\ApplicationFrameHost.exe Directory C:\Windows\System32 old
Microsoft® Windows® Operating System C:\Windows\system32\ApplicationFrameHost.exe Directory C:\Windows\System32 new
Microsoft® Windows® Operating System C:\Windows\system32\ApplicationFrameHost.exe Key HKLM\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\windows.immersivecontrolpanel_cw5n1h2txyewy\SplashScreen\windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel add
Microsoft® Windows® Operating System C:\Windows\system32\ApplicationFrameHost.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\windows.immersivecontrolpanel_cw5n1h2txyewy\PersistedTitleBarData add
Microsoft® Windows® Operating System C:\Windows\system32\browser_broker.exe Directory C:\Windows\System32 old
Microsoft® Windows® Operating System C:\Windows\system32\browser_broker.exe Directory C:\Windows\System32 new
Microsoft® Windows® Operating System C:\Windows\system32\DllHost.exe Directory C:\Windows\System32 old
Microsoft® Windows® Operating System C:\Windows\system32\DllHost.exe Directory C:\Windows\System32 new
Microsoft® Windows® Operating System C:\Windows\SYSTEM32\fontdrvhost.exe Directory C:\Windows\System32 old
Microsoft® Windows® Operating System C:\Windows\SYSTEM32\fontdrvhost.exe Directory C:\Windows\System32 new
Microsoft® Windows® Operating System C:\Windows\system32\lsass.exe Directory C:\Windows\System32 old
Microsoft® Windows® Operating System C:\Windows\system32\lsass.exe Directory C:\Windows\System32 new
Microsoft® Windows® Operating System C:\Windows\System32\RuntimeBroker.exe Directory C:\Windows\System32 old
Microsoft® Windows® Operating System C:\Windows\System32\RuntimeBroker.exe Directory C:\Windows\System32 new
Microsoft® Windows® Operating System C:\Windows\SYSTEM32\sihost.exe Directory C:\Windows\System32 old
Microsoft® Windows® Operating System C:\Windows\SYSTEM32\sihost.exe Directory C:\Windows\System32 new
Microsoft® Windows® Operating System C:\Windows\system32\wbem\wmiprvse.exe File \Device\DeviceApi del
Microsoft® Windows® Operating System C:\Windows\system32\wbem\wmiprvse.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\wbem\ru-RU\cimwin32.dll.mui 2023-06-12 02:28.25 20,888 del
Microsoft® Windows® Operating System C:\Windows\system32\wbem\wmiprvse.exe Directory C:\Windows\System32 old
Microsoft® Windows® Operating System C:\Windows\system32\wbem\wmiprvse.exe Directory C:\Windows\System32 new
Microsoft® Windows® Operating System C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe File \Device\Afd del
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe File \Device\NamedPipe\srvsvc add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe File \FileSystem\Filters\FltMgrMsg add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\explorerframe.dll.mui 2023-06-12 02:28.22 37,792 add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\oleaccrc.dll.mui 2023-06-12 02:28.23 30,616 add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db 2023-06-12 15:55.27 1,048,576 add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe File C:\Windows\SystemResources\comdlg32.dll.mun 2019-03-19 07:45.05 352,768 add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe File C:\Windows\SystemResources\ExplorerFrame.dll.mun 2019-03-19 07:45.05 2,640,896 add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe File C:\Windows\SystemResources\shell32.dll.mun 2019-06-12 04:33.41 14,768,128 add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Classes\CLSID\{24ad3ad4-a569-4530-98e1-ab02f9417aa8}\Instance add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Classes\CLSID\{d3162b92-9365-467a-956b-92703aca08af}\Instance add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Internet Explorer\Main add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Internet Explorer\Security add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2112AB0A-C86A-4ffe-A368-0DE96E47012E}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2400183A-6185-49FB-A2D8-4A392A602BA3}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{24D89E24-2F19-4534-9DDE-6A6671FBB8FE}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2B20DF75-1EDA-4039-8097-38798227D5B7}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{339719B5-8C47-4894-94C2-D8F77ADD44A6}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{33E28130-4E1E-4676-835A-98395C3BC3BB}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{374DE290-123F-4565-9164-39C4925E467B}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{491E922F-5643-4af4-A7EB-4E7A138D8174}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{4BD8D571-6D19-48D3-BE97-422220080E43}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52528A6B-B9E3-4add-B60D-588C2DBA842D}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{56784854-C6CB-462B-8169-88E350ACB882}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{767E6811-49CB-4273-87C2-20F355E1085B}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7b0db17d-9cd2-4a93-9733-46cc89022e7c}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9B74B6A3-0DFD-4f11-9E78-5F7800F2E772}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A302545D-DEFF-464b-ABE8-61C8648D939B}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A990AE9F-A03B-4e80-94BC-9912D7504104}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C3F2459E-80D6-45DC-BFEF-1F769F2BE730}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{E25B5812-BE88-4bd9-94B0-29233477B6C3}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f3ce0f7c-4901-4acc-8648-d5d44b04ef8f}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SyncRootManager add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\Windows\Shell add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\WindowsRuntime add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\Server add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Policies add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKLM\SOFTWARE\WOW6432Node add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKU add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Internet Explorer\Main add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Internet Explorer\Security add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Policies add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\Shell add
Sysinternals Procmon C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\ del
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\advapi32.dll.mui 2023-06-12 02:28.22 14,216 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\apphelp.dll.mui 2023-06-12 02:28.22 13,704 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\bcrypt.dll.mui 2023-06-12 02:28.22 13,720 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\comdlg32.dll.mui 2023-06-12 02:28.22 70,552 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\d2d1.dll.mui 2023-06-12 02:28.22 301,456 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\dhcpcsvc.dll.mui 2023-06-12 02:28.22 13,216 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\dhcpcsvc6.dll.mui 2023-06-12 02:28.22 39,832 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\dnsapi.dll.mui 2023-06-12 02:28.22 81,312 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\DWrite.dll.mui 2023-06-12 02:28.22 12,680 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\fwpuclnt.dll.mui 2023-06-12 02:28.22 174,496 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\iertutil.dll.mui 2023-06-12 02:28.23 13,704 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\iphlpapi.dll.mui 2023-06-12 02:28.23 14,240 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\jscript9.dll.mui 2023-06-12 02:28.23 45,984 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\mlang.dll.mui 2023-06-12 02:28.23 28,064 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\msctf.dll.mui 2023-06-12 02:28.23 14,736 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\msimtf.dll.mui 2023-06-12 02:28.23 12,704 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\mskeyprotect.dll.mui 2023-06-12 02:28.23 12,704 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\ncrypt.dll.mui 2023-06-12 02:28.23 16,776 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\ntmarta.dll.mui 2023-06-12 02:28.23 17,296 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\oledlg.dll.mui 2023-06-12 02:28.23 40,328 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\powrprof.dll.mui 2023-06-12 02:28.24 80,784 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\propsys.dll.mui 2023-06-12 02:28.24 94,112 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\rpcrt4.dll.mui 2023-06-12 02:28.24 32,664 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\schannel.dll.mui 2023-06-12 02:28.24 15,256 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\SHCore.dll.mui 2023-06-12 02:28.24 12,696 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\shlwapi.dll.mui 2023-06-12 02:28.24 14,752 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\twinapi.appcore.dll.mui 2023-06-12 02:28.24 17,800 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\UIAutomationCore.dll.mui 2023-06-12 02:28.24 30,096 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\uxtheme.dll.mui 2023-06-12 02:28.24 18,824 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\webio.dll.mui 2023-06-12 02:28.24 51,608 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\windows.storage.dll.mui 2023-06-12 02:28.24 40,864 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\winhttp.dll.mui 2023-06-12 02:28.24 31,120 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\wininet.dll.mui 2023-06-12 02:28.24 44,944 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\wintypes.dll.mui 2023-06-12 02:28.24 12,704 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\wldp.dll.mui 2023-06-12 02:28.24 17,312 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Users\user\Desktop\tools\SysTracer x64\data\snap-1.tmp 2026-10-07 00:09.11 6,295,492 del
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Users\user\Desktop\tools\SysTracer x64\data\snap-2.tmp 2026-10-07 00:13.23 21,821,819 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Directory C:\Windows del
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Windows\System32\en-US\ntasn1.dll.mui 2019-03-19 14:34.30 3,072 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Windows\System32\en-US\rsaenh.dll.mui 2019-03-19 14:34.30 9,728 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Windows\System32\en-US\sechost.dll.mui 2019-03-19 14:34.30 2,560 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Windows\System32\ru-RU\combase.dll.mui 2019-03-19 14:34.30 40,960 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Windows\System32\ru-RU\kernel32.dll.mui 2019-03-19 14:34.33 1,042,944 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Windows\System32\ru-RU\KernelBase.dll.mui 2019-03-19 14:34.31 1,342,464 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Windows\System32\ru-RU\ntdll.dll.mui 2019-03-19 14:34.30 484,864 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Windows\System32\ru-RU\ole32.dll.mui 2019-03-19 14:34.30 31,232 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Windows\System32\ru-RU\shell32.dll.mui 2019-03-19 14:34.32 478,720 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Windows\System32\ru-RU\srpapi.dll.mui 2019-03-19 14:34.30 8,704 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Windows\System32\ru-RU\winspool.drv.mui 2019-03-19 14:34.27 84,480 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Windows\System32\ru-RU\ws2_32.dll.mui 2019-03-19 14:34.30 24,576 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Directory C:\Windows\WinSxS del
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Directory C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.18362.175_ru-ru_89567a6fc412ca34 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.18362.175_ru-ru_89567a6fc412ca34\comctl32.dll.mui 2019-06-12 04:33.42 6,144 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Directory C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.18362.175_ru-ru_45f00bb890bb425d add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe File C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.18362.175_ru-ru_45f00bb890bb425d\comctl32.dll.mui 2019-06-12 04:33.42 12,288 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Classes\CLSID del
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2112AB0A-C86A-4ffe-A368-0DE96E47012E}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2400183A-6185-49FB-A2D8-4A392A602BA3}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{24D89E24-2F19-4534-9DDE-6A6671FBB8FE}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2B20DF75-1EDA-4039-8097-38798227D5B7}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{339719B5-8C47-4894-94C2-D8F77ADD44A6}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{33E28130-4E1E-4676-835A-98395C3BC3BB}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{374DE290-123F-4565-9164-39C4925E467B}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{491E922F-5643-4af4-A7EB-4E7A138D8174}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{4BD8D571-6D19-48D3-BE97-422220080E43}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52528A6B-B9E3-4add-B60D-588C2DBA842D}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{56784854-C6CB-462B-8169-88E350ACB882}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{767E6811-49CB-4273-87C2-20F355E1085B}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7b0db17d-9cd2-4a93-9733-46cc89022e7c}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9B74B6A3-0DFD-4f11-9E78-5F7800F2E772}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A302545D-DEFF-464b-ABE8-61C8648D939B}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A990AE9F-A03B-4e80-94BC-9912D7504104}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C3F2459E-80D6-45DC-BFEF-1F769F2BE730}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{E25B5812-BE88-4bd9-94B0-29233477B6C3}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f3ce0f7c-4901-4acc-8648-d5d44b04ef8f}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Classes add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Clients add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Cellular add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\COM3 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Calais\Current add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Calais\Readers add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Services add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\CTF\SystemShared add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\CTF\TIP add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\DeviceReg add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\DFS add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Driver Signing add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\EnterpriseCertificates add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\EventSystem add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\FingerKB add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\FuzzyDS add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Input add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\LanguageOverlay add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Messaging add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\MSMQ add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\MTFFuzzyFactors add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\MTFInputType add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\MTFKeyboardMappings add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Non-Driver Signing add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Notepad\DefaultFonts add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Ole add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Phone add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Pim add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Poom add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Ras add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Rpc add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\SecurityManager add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Semgr add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Shell add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Software\Microsoft\Shared Tools\Msinfo add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\SystemCertificates add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\TermServLicensing add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Transaction Server add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Unified Store add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\UserData add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Console add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Containers add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\FontDPI add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\FontLink add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\FontMapper add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Fonts add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\FontSubstitutes add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\GRE_Initialize add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\LanguagePack add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\NetworkCards add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Perflib add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Ports add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Print add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\ProfileList add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Time Zones add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows Search add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\App Paths add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Control Panel\Cursors\Schemes add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Control Panel\Theme add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Control Panel\ThemeVolatile add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\DriveIcons add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\KindMap add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Group Policy add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Parental Controls add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\PreviewHandlers add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Setup add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Telephony\Locations add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Microsoft\XAML add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\Policies add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SOFTWARE\WOW6432Node\RegisteredApplications add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Control\Print\Printers add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Control\Video\{7C8C3757-C0DF-11F1-B68A-806E6F6E6963}\0000 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Hardware Profiles\Current add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\.NET CLR Data\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\.NET CLR Networking 4.0.0.0\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\.NET CLR Networking\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\.NET Data Provider for Oracle\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\.NET Data Provider for SqlServer\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\.NET Memory Cache 4.0\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\.NETFramework\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\BITS\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\ESENT\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\Lsa\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\LSM\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\MSDTC Bridge 4.0.0.0\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\MSDTC\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\MSSCNTRS\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\PerfDisk\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\PerfNet\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\PerfOS\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\PerfProc\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\rdyboost\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\RemoteAccess\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\SMSvcHost 4.0.0.0\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\Spooler\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\TapiSrv\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\Tcpip\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\TermService\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\UGatherer\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\UGTHRSVC\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\usbhub\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\Windows Workflow Foundation 4.0.0.0\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\WmiApRpl\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\ControlSet001\Services\WSearchIdxPi\Performance add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\CurrentControlSet add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKLM\SYSTEM\HardwareConfig\Current add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKU\S-1-5-18 add
SysTracer v2.10 C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts add
VMware Guest Authentication C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe Directory C:\Windows\System32 old
VMware Guest Authentication C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe Directory C:\Windows\System32 new
VMware SVGA 3D C:\Windows\system32\vm3dservice.exe Directory C:\Windows\System32 old
VMware SVGA 3D C:\Windows\system32\vm3dservice.exe Directory C:\Windows\System32 new
Windows.WARP.JITService.exe C:\Windows\system32\Windows.WARP.JITService.exe Directory C:\Windows\System32 old
Windows.WARP.JITService.exe C:\Windows\system32\Windows.WARP.JITService.exe Directory C:\Windows\System32 new
Windows® Search C:\Windows\system32\SearchFilterHost.exe File \Device\KsecDD add
Windows® Search C:\Windows\system32\SearchFilterHost.exe Directory C:\Windows\System32 old
Windows® Search C:\Windows\system32\SearchFilterHost.exe Directory C:\Windows\System32 new
Windows® Search C:\Windows\system32\SearchFilterHost.exe File C:\Windows\System32\ru-RU\combase.dll.mui 2019-03-19 14:34.30 40,960 add
Windows® Search C:\Windows\system32\SearchFilterHost.exe File C:\Windows\System32\ru-RU\KernelBase.dll.mui 2019-03-19 14:34.31 1,342,464 add
Windows® Search C:\Windows\system32\SearchFilterHost.exe Key HKLM\SOFTWARE\Classes\PackagedCom add
Windows® Search C:\Windows\system32\SearchFilterHost.exe Key HKLM\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Extensions add
Windows® Search C:\Windows\system32\SearchFilterHost.exe Key HKLM\SOFTWARE\Microsoft\WindowsRuntime add
Windows® Search C:\Windows\system32\SearchFilterHost.exe Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId add
Windows® Search C:\Windows\system32\SearchFilterHost.exe Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\Server add
Windows® Search C:\Windows\system32\SearchFilterHost.exe Key HKLM\SYSTEM\ControlSet001\Control\Nls\CodePage add
Windows® Search C:\Windows\system32\SearchFilterHost.exe Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids add
Windows® Search C:\Windows\system32\SearchFilterHost.exe Key HKU\.DEFAULT\Control Panel\International add
Windows® Search C:\Windows\system32\SearchProtocolHost.exe Directory \Sessions\1\BaseNamedObjects add
Windows® Search C:\Windows\system32\SearchProtocolHost.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\tquery.dll.mui 2023-06-12 02:28.24 201,104 add
Windows® Search C:\Windows\system32\SearchProtocolHost.exe Directory C:\Windows\System32 old
Windows® Search C:\Windows\system32\SearchProtocolHost.exe Directory C:\Windows\System32 new
Windows® Search C:\Windows\system32\SearchProtocolHost.exe File C:\Windows\System32\ru-RU\KernelBase.dll.mui 2019-03-19 14:34.31 1,342,464 add
Windows® Search C:\Windows\system32\SearchProtocolHost.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag del
Windows® Search C:\Windows\system32\SearchProtocolHost.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag del
Windows® Search C:\Windows\system32\SearchProtocolHost.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag del
Windows® Search C:\Windows\system32\SearchProtocolHost.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PropertyBag del
Windows® Search C:\Windows\system32\SearchProtocolHost.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag del
Windows® Search C:\Windows\system32\SearchProtocolHost.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag del
Windows® Search C:\Windows\system32\SearchProtocolHost.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag del
Windows® Search C:\Windows\system32\SearchProtocolHost.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes add
Windows® Search C:\Windows\system32\SearchProtocolHost.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings add
Windows® Search C:\Windows\system32\SearchProtocolHost.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft add
Операционная система Microsoft® Windows® C:\Windows\Explorer.EXE Directory C:\Users\user\Desktop\lab1\src old
Операционная система Microsoft® Windows® C:\Windows\Explorer.EXE Directory C:\Users\user\Desktop\lab1\src new
Операционная система Microsoft® Windows® C:\Windows\Explorer.EXE Directory C:\Windows\System32 old
Операционная система Microsoft® Windows® C:\Windows\Explorer.EXE Directory C:\Windows\System32 new
Операционная система Microsoft® Windows® C:\Windows\Explorer.EXE File C:\Windows\System32\ru-RU\ieframe.dll.mui 2019-03-19 14:34.16 1,805,824 add
Операционная система Microsoft® Windows® C:\Windows\Explorer.EXE Key HKLM\SOFTWARE\Classes add
Операционная система Microsoft® Windows® C:\Windows\Explorer.EXE Key HKLM\SOFTWARE\Classes\Applications\winword.exe add
Операционная система Microsoft® Windows® C:\Windows\Explorer.EXE Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache add
Операционная система Microsoft® Windows® C:\Windows\Explorer.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache add
Операционная система Microsoft® Windows® C:\Windows\Explorer.EXE Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe File \Device\CNG add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe File \Device\DeviceApi add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe File \Device\KsecDD add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Directory \KnownDlls add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key \REGISTRY\A\{E8F33BC0-48C7-489A-BD59-CF9945E9D496} add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Directory \Sessions\1\BaseNamedObjects add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\ImmersiveControlPanel\ru-RU\SystemSettings.exe.mui 2023-06-12 02:28.21 15,760 add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\usercpl.dll.mui 2023-06-12 02:28.24 82,336 add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe File C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackru-RU_18362.49.138.0_neutral__8wekyb3d8bbwe\Windows\System32\ru-RU\windows.ui.xaml.dll.mui 2023-06-12 02:28.24 29,592 add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db 2023-06-12 15:55.30 1,048,576 add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe File C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db 2023-09-08 11:07.24 29,232 add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe File C:\Windows\Fonts\segoeui.ttf 2019-03-19 07:44.11 955,804 add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe File C:\Windows\Fonts\segoeuil.ttf 2019-03-19 07:44.11 913,712 add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Directory C:\Windows\ImmersiveControlPanel add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe File C:\Windows\Registration\R000000000006.clb 2023-06-12 00:13.07 27,356 add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Directory C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.175_none_e6c3ab1f131014c9 add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Classes add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Classes\ActivatableClasses add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Classes\ActivatableClasses\Package add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Classes\Extensions add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Classes\Extensions\ContractId add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Microsoft\Internet Explorer\Main add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Microsoft\Internet Explorer\Security add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Microsoft\Ole add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Microsoft\Windows\Dwm add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Microsoft\WindowsRuntime add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Microsoft\WindowsRuntime\Server add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SYSTEM\ControlSet001\Control\NetworkProvider\HwOrder add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SYSTEM\ControlSet001\Control\NetworkProvider\ProviderOrder add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SYSTEM\ControlSet001\Control\NetworkUxManager add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SYSTEM\ControlSet001\Control\Nls\CodePage add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SYSTEM\ControlSet001\Control\Terminal Server add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SYSTEM\ControlSet001\Services\crypt32 add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001 add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Control Panel\Accessibility add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Control Panel\Colors add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Input\EC add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Internet Explorer\Main add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Internet Explorer\Security add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\CDP add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Holographic add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Lock Screen add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Mobility add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\ActivatableClasses add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\ActivatableClasses\Package add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\ActivatableClasses\Package\windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h2txyewy add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Extensions add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Extensions\ContractId add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings add
Операционная система Microsoft® Windows® C:\Windows\ImmersiveControlPanel\SystemSettings.exe Key HKU\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft add
Операционная система Microsoft® Windows® C:\Windows\SYSTEM32\ctfmon.exe Directory C:\Windows\System32 old
Операционная система Microsoft® Windows® C:\Windows\SYSTEM32\ctfmon.exe Directory C:\Windows\System32 new
Операционная система Microsoft® Windows® C:\Windows\SYSTEM32\dwm.exe Directory C:\Windows\System32 old
Операционная система Microsoft® Windows® C:\Windows\SYSTEM32\dwm.exe Directory C:\Windows\System32 new
Операционная система Microsoft® Windows® C:\Windows\System32\smartscreen.exe File \Device\Afd del
Операционная система Microsoft® Windows® C:\Windows\System32\smartscreen.exe Directory C:\Windows\System32 old
Операционная система Microsoft® Windows® C:\Windows\System32\smartscreen.exe Directory C:\Windows\System32 new
Операционная система Microsoft® Windows® C:\Windows\System32\spoolsv.exe Directory C:\Windows\System32 old
Операционная система Microsoft® Windows® C:\Windows\System32\spoolsv.exe Directory C:\Windows\System32 new
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe File C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd 2026-10-06 22:21.58 6,291,456 del
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe File C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-shm 2026-10-07 00:06.25 32,768 del
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe File C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-wal 2026-10-07 00:06.26 12,392 del
Операционная система Microsoft® Windows® C:\Windows\System32\svchost.exe File C:\Users\user\AppData\Local\Comms\UnistoreDB\USS.jtx 2026-10-07 00:07.13 3,145,728 old
Операционная система Microsoft® Windows® C:\Windows\System32\svchost.exe File C:\Users\user\AppData\Local\Comms\UnistoreDB\USS.jtx 2026-10-07 00:09.13 3,145,728 new
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe File C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user\ActivitiesCache.db-wal 2026-10-07 00:08.38 531,512 old
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe File C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user\ActivitiesCache.db-wal 2026-10-07 00:12.55 889,952 new
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe Directory C:\Windows\System32 old
Операционная система Microsoft® Windows® C:\Windows\System32\svchost.exe Directory C:\Windows\System32 new
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe File C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db 2023-06-11 22:41.00 4,096 add
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe File C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-shm 2026-10-07 00:09.23 32,768 add
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe File C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-wal 2026-10-07 00:09.23 3,621,512 add
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe File C:\Windows\System32\wbem\Repository\INDEX.BTR 2026-10-06 22:18.54 5,046,272 old
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe File C:\Windows\System32\wbem\Repository\INDEX.BTR 2026-10-07 00:11.24 5,046,272 new
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe File C:\Windows\System32\wbem\Repository\MAPPING2.MAP 2026-10-06 02:38.09 89,660 old
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe File C:\Windows\System32\wbem\Repository\MAPPING2.MAP 2026-10-07 00:11.24 89,660 new
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe File C:\Windows\System32\wbem\Repository\OBJECTS.DATA 2026-10-06 22:18.54 27,049,984 old
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe File C:\Windows\System32\wbem\Repository\OBJECTS.DATA 2026-10-07 00:11.24 27,049,984 new
Операционная система Microsoft® Windows® C:\Windows\System32\svchost.exe File C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx 2026-10-07 00:12.59 69,632 add
Операционная система Microsoft® Windows® C:\Windows\System32\svchost.exe File C:\Windows\System32\winevt\Logs\Microsoft-Windows-Storsvc%4Diagnostic.evtx 2026-10-06 22:21.58 69,632 old
Операционная система Microsoft® Windows® C:\Windows\System32\svchost.exe File C:\Windows\System32\winevt\Logs\Microsoft-Windows-Storsvc%4Diagnostic.evtx 2026-10-07 00:09.25 69,632 new
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe Directory C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.175_none_e6c3ab1f131014c9 add
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe Key HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\PushNotifications add
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe Key HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\PushNotifications\wpnidm add
Операционная система Microsoft® Windows® C:\Windows\SYSTEM32\taskhostw.exe File C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat 2026-10-07 00:06.27 33,030,144 old
Операционная система Microsoft® Windows® C:\Windows\SYSTEM32\taskhostw.exe File C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat 2026-10-07 00:11.50 33,554,432 new
Операционная система Microsoft® Windows® C:\Windows\SYSTEM32\taskhostw.exe Directory C:\Windows\System32 old
Операционная система Microsoft® Windows® C:\Windows\SYSTEM32\taskhostw.exe Directory C:\Windows\System32 new
Операционная система Microsoft® Windows® C:\Windows\SYSTEM32\winlogon.exe Directory C:\Windows\System32 old
Операционная система Microsoft® Windows® C:\Windows\SYSTEM32\winlogon.exe Directory C:\Windows\System32 new
Служба Windows® Search C:\Windows\system32\SearchIndexer.exe Directory C:\Windows\System32 old
Служба Windows® Search C:\Windows\system32\SearchIndexer.exe Directory C:\Windows\System32 new
Служба Windows® Search C:\Windows\system32\SearchIndexer.exe File C:\Windows\System32\ru-RU\shell32.dll.mui 2019-03-19 14:34.32 478,720 add
Служба Windows® Search C:\Windows\system32\SearchIndexer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag add
Служба Windows® Search C:\Windows\system32\SearchIndexer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag add
Служба Windows® Search C:\Windows\system32\SearchIndexer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag add
Служба Windows® Search C:\Windows\system32\SearchIndexer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag add
Служба Windows® Search C:\Windows\system32\SearchIndexer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag add
Служба Windows® Search C:\Windows\system32\SearchIndexer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\PropertyBag add
Служба Windows® Search C:\Windows\system32\SearchIndexer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag add
Служба Windows® Search C:\Windows\system32\SearchIndexer.exe Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag add
Служба Windows® Search C:\Windows\system32\SearchIndexer.exe Key HKU add
Opened Ports\ mod
- - TCP 10.0.2.15 49673 52.123.129.14 443 TIME_WAIT del
- - TCP 10.0.2.15 49674 20.42.73.28 443 TIME_WAIT del
- - TCP 10.0.2.15 49677 23.32.243.39 80 TIME_WAIT del
- - TCP 10.0.2.15 49688 40.126.31.71 443 TIME_WAIT del
- - TCP 10.0.2.15 49693 184.30.157.106 80 TIME_WAIT del
- - TCP 10.0.2.15 49694 2.16.106.216 80 TIME_WAIT del
- - TCP 10.0.2.15 49695 104.18.21.213 80 TIME_WAIT del
- - TCP 10.0.2.15 49697 46.8.227.98 443 TIME_WAIT del
- - TCP 10.0.2.15 49698 104.18.12.149 80 TIME_WAIT del
- - TCP 10.0.2.15 49699 104.18.12.149 443 TIME_WAIT del
- - TCP 10.0.2.15 49700 104.18.11.31 443 TIME_WAIT del
- - TCP 10.0.2.15 49701 150.171.109.107 443 TIME_WAIT del
- - TCP 10.0.2.15 49703 72.154.7.16 443 TIME_WAIT del
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49712 52.110.0.12 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49714 2.16.6.160 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49715 2.16.153.40 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49716 2.16.153.40 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49717 2.16.153.40 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49718 2.16.153.40 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49719 2.16.153.40 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49720 2.16.153.40 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49721 2.16.153.40 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49722 2.16.153.40 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49723 2.18.121.69 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49724 2.18.121.69 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49725 2.18.121.69 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49726 2.18.121.69 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49727 2.18.121.69 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49728 2.18.121.69 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49729 2.18.121.69 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49730 2.18.121.69 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49731 2.18.121.69 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49732 2.18.121.69 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49733 2.18.121.69 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49734 2.18.121.69 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49735 2.18.121.69 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49736 2.18.121.69 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49737 2.16.153.40 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49738 2.16.153.40 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49739 2.16.153.40 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49740 2.16.153.40 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49741 2.16.153.40 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49742 2.16.153.40 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49743 2.16.153.40 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49744 2.16.153.40 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49745 2.16.153.40 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49746 2.18.121.69 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49747 2.18.121.69 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49748 2.16.153.40 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49749 2.16.153.40 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49750 2.18.121.69 443 ESTABLISHED add
Microsoft Office 2016 C:\Program Files\Microsoft Office\Office16\WINWORD.EXE TCP 10.0.2.15 49751 2.18.121.69 443 ESTABLISHED add
Microsoft® Windows® Operating System C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe TCP 10.0.2.15 49687 2.16.106.196 443 CLOSE_WAIT del
pid 2920 ? TCP 10.0.2.15 49713 52.123.129.14 443 ESTABLISHED add
Операционная система Microsoft® Windows® C:\Windows\System32\smartscreen.exe TCP 10.0.2.15 49690 20.56.187.20 443 ESTABLISHED del
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe TCP 10.0.2.15 49705 93.123.17.252 80 ESTABLISHED del
Операционная система Microsoft® Windows® C:\Windows\System32\svchost.exe TCP 10.0.2.15 49706 20.184.175.22 443 ESTABLISHED del
Операционная система Microsoft® Windows® C:\Windows\system32\svchost.exe TCP 10.0.2.15 49707 172.211.123.250 443 ESTABLISHED add
